CVE-2026-74741net: ngbe: fix NULL pointer dereference in non-MSI-X interrupt enabling
Updated under an hour ago ()
Does this affect you?
It affects Linux. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: net: ngbe: fix NULL pointer dereference in non-MSI-X interrupt enabling In non-MSI-X mode (such as legacy INTx or single MSI), wx->msix_entry is not allocated or initialized. Calling NGBE_INTR_MISC(wx) dereferences wx->msix_entry->entry, leading to a NULL pointer dereference crash. This issue was introduced by fixing the IRQ vector when the number of VFs is 7. Fix the issue by explicitly checking `pdev->msix_enabled` to determine the correct vector index. Additionally, as a side fix, set the interrupt mask to BIT(0) for the non-MSI-X fallback. In MSI/INTx mode, the MISC and queue interrupts share vector 0, and the WX_PX_MISC_IVAR register is only valid in the MSI-X case. Thus, BIT(0) is the correct mask for the miscellaneous cause when MSI-X is disabled.
- CVSS
- 7.5 HIGH (v3.1, CNA)CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Received
- Record last updated
- Aug 27, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
Linux Linux linux:linux (from the name) | from 4174c0c331a2aa3322d3b3be532808deb041b37d before cef4c5b9aca24651d069adf9462b221df6a2a669; 4174c0c331a2aa3322d3b3be532808deb041b37d builds before 0ab482b2195edc000262f0eae1cdcb416b8f335d; 4174c0c331a2aa3322d3b3be532808deb041b37d builds before 5f3a13e0bb5ebcc1ca2dfda42ea40b9f3c2be6ea | CNA record |
References
- https://git.kernel.org/stable/c/cef4c5b9aca24651d069adf9462b221df6a2a669
- https://git.kernel.org/stable/c/0ab482b2195edc000262f0eae1cdcb416b8f335d
- https://git.kernel.org/stable/c/5f3a13e0bb5ebcc1ca2dfda42ea40b9f3c2be6ea
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.