Instituto Nacional de ciberseguridad. Sección Incibe
Instituto Nacional de Ciberseguridad. Sección INCIBE-CERT

CVE-2026-74698

Gravedad:
Pendiente de análisis
Tipo:
No Disponible / Otro tipo
Fecha de publicación:
22/08/2026
Última modificación:
22/08/2026

Descripción

*** Pendiente de traducción *** In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> net/mlx5e: fix BQL reset on SQ re-activation<br /> <br /> mlx5e_queue_start() deactivates and re-activates all channels but closes<br /> only the queue being restarted. mlx5e_activate_txqsq() then<br /> unconditionally calls netdev_tx_reset_queue(), zeroing the BQL counters<br /> of channels that kept their in-flight TX WQEs. The next completion then<br /> over-charges and trips the BUG_ON() in dql_completed():<br /> <br /> kernel BUG at lib/dynamic_queue_limits.c:99!<br /> RIP: 0010:dql_completed+0x23d/0x280<br /> Call Trace:<br /> <br /> mlx5e_poll_tx_cq+0x668/0xa60<br /> mlx5e_napi_poll+0x5b/0x7b0<br /> net_rx_action+0x15a/0x580<br /> <br /> Reset BQL only when the SQ has no bytes in flight (sq-&gt;cc == sq-&gt;pc).<br /> <br /> In the case that reset is skipped, the outstanding WQEs will eventually<br /> complete and rebalance the dql. The dql-&gt;limit is carried across the<br /> reset.

Impacto