CVE-2026-74742 evidence review
Linux
In the Linux kernel, the following vulnerability has been resolved: veth: fix queue index used to wake the peer txq in veth_poll veth_poll() derives the index of the peer TX queue to wake from rq->xdp_rxq.queue_index. That field is only initialized by xdp_rxq_info_reg() in veth_enable_xdp_range(), which runs only when an XDP program is attached. On the plain GRO/NAPI path (veth_napi_enable_range()) xdp_rxq_info_reg() is never called, so queue_index stays 0 for every queue, as priv->rq is zero-allocated. So in a multi-queue setup with GRO enabled and no XDP program attached, every NAPI insta...
This record remains available for product and version identification, but it is not presented as a complete remediation procedure. Confirm the affected range and the supported fix in a direct vendor advisory before changing production systems.
Identify the product and installed version
Record whether Linux is present, where it is installed, and which interfaces are exposed.
- Record the product name, package or appliance identifier, and installed version.
- Identify internet-facing, administrative, API, and internal access paths.
- Preserve the pre-change configuration and relevant service logs.
Compare the affected range
Use the current record as an identification aid: >= 9fe31b3f314534e238aa6d0b6fb492134cbcf8be < b662a1fb4f3a5ea19bac24eea8315b1d05be51e7, >= dc82a33297fc2c58cb0b2b008d728668d45c0f6a < 73f8dd22b1e533a99ecc3f9b5de6c6daccaecace, >= dc82a33297fc2c58cb0b2b008d728668d45c0f6a < 90bb11fb29d3c55a2c46dc7c386d096b286e7fcf, >= dc82a33297fc2c58cb0b2b008d728668d45c0f6a < 60db47f02bfa2aa688938aa199117ec4f8e31d23, >= 6.12.61 < 6.12.105, >= 6.16. Resolve incomplete inventory results before deciding that an asset is unaffected.
Verify the authoritative remediation source
Open the linked source material and locate a direct vendor advisory for this CVE. Confirm the supported fixed release and product-specific update path before making a production change.
Operational boundary
This page does not replace the vendor advisory, support contract, change-management process, or recovery plan. Do not infer that an asset is unaffected from an incomplete inventory query or a missing fixed-version field.