CVE-2026-74741Patch

LOWCVSS 7.5 · HIGH

Signal is active with 2 mentions in latest observed window

Immediate actions

  • Patch affected systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

In the Linux kernel, the following vulnerability has been resolved: net: ngbe: fix NULL pointer dereference in non-MSI-X interrupt enabling In non-MSI-X mode (such as legacy INTx or single MSI), wx->msix_entry is not allocated or initialized. Calling NGBE_INTR_MISC(wx) dereferences wx->msix_entry->entry, leading to a NULL pointer dereference crash. This issue was introduced by fixing the IRQ vector when the number of VFs is 7. Fix the issue by explicitly checking `pdev->msix_enabled` to determine the correct vector index. Additionally, as a side fix, set the interrupt mask to BIT(0) for the non-MSI-X fallback. In MSI/INTx mode, the MISC and queue interrupts share vector 0, and the WX_PX_MISC_IVAR register is only valid in the MSI-X case. Thus, BIT(0) is the correct mask for the miscellaneous cause when MSI-X is disabled.

0.5/ 10 priority

Sources & remediation

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

NONE

Threat summary

  • Patch or workaround signal is available
  • 2 mentions across 1 observed day

What's happening

  • Patch or workaround mentioned in 1 signal
  • Technical details provided in 2 signals
  • 2 total mentions across 1 day

Deep dive

Activity timeline2 mentions / 1d
01122Mentions · 2026-08-30: 2Patch / Workaround · 2026-08-30: 1Technical Details · 2026-08-30: 208-30
Signal classification1 categories
Patch
2100.0%
Referenced assets2 URLs
By indicator
Full discourse2 posts
  • Infoflowcloud@infoflowcloud
    Patch

    🚨*CVE* CVE-2026-74741 In the Linux kernel, the following vulnerability has been resolved: net: ngbe: fix NULL pointer dereference in non-MSI-X interrupt enabling In non-MSI-X mode (such … https://www.cve.org/CVERecord?id=CVE-2026-74741 ----- Traducción: CVE-2026-74741 En … https://infoflow.cloud`

    Post summary

    The post announces that CVE‑2026‑74741—a NULL pointer dereference in the Linux kernel’s ngbe driver—has been resolved, but it does not disclose any patch details, PoC, or active exploitation evidence.

    0000044
    102 followersView on X
  • CVE@CVEnew
    Patch

    CVE-2026-74741 In the Linux kernel, the following vulnerability has been resolved: net: ngbe: fix NULL pointer dereference in non-MSI-X interrupt enabling In non-MSI-X mode (such … https://www.cve.org/CVERecord?id=CVE-2026-74741

    Post summary

    The text announces that CVE-2026-74741 has been fixed in the Linux kernel by addressing a NULL pointer dereference, but provides no PoC, exploit, or evidence of active exploitation.

    00000802
    58.0K followersView on X

Explore more