CVE-2026-74708

*** Pendiente de traducción *** In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> xsk: validate launch-time metadata size<br /> <br /> Launch-time metadata extends beyond the first 16 bytes of struct<br /> xsk_tx_metadata. Reject the request when the registered metadata area does<br /> not contain the complete field.<br /> <br /> Snapshot the validated flags for the generic transmit path and use that<br /> snapshot for request and completion processing, avoiding inconsistent<br /> decisions if user space changes the flags concurrently.<br /> <br /> Note that only xsk_skb_metadata is properly using the flags,<br /> __xsk_buff_get_metadata ignores them. Next commits address that.