CVE-2026-74707

*** Pendiente de traducción *** In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> xsk: validate metadata when processing requests<br /> <br /> The zero-copy path validates TX metadata while obtaining the descriptor<br /> context, then reads it again later when preparing the hardware request.<br /> User space can change the metadata between those operations and bypass the<br /> original validation.<br /> <br /> Validate the metadata in xsk_tx_metadata_request() and use the resulting<br /> flags snapshot for every feature check. Read request fields once so all<br /> zero-copy drivers process only values observed after successful<br /> validation.