---
id: CVE-2026-74697
title: |-
  In the Linux kernel, the following vulnerability has been resolved:

  bnxt_en: Disable EOP for TPA on all chips to prevent data corruption

  EOP (End of frame padding) on the AGG ring may cause overlapping of
  zero padding at the end of one…
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  bnxt_en: Disable EOP for TPA on all chips to prevent data corruption

  EOP (End of frame padding) on the AGG ring may cause overlapping of
  zero padding at the end of one…
severity: high
cvss: 8.2
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L'
published: '2026-08-22'
updated: '2026-10-14'
sourceUpdated: '2026-10-14T13:10:00.187'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-74697'
references:
  - url: 'https://git.kernel.org/stable/c/410da4428b1f47bf9a84bdc0bcaa089d73ba2048'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/68c181af7cd1ca9cbf29acd95911073bfd3c6397'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/7aee22a35978b44784612c156e358e375ddf5d16'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/aab3b5f4d8ec8598606ee011e219ef824ae25ca0'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/b61c4911204a0a2f900e538d64ceb608f6c9614d'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/c1962ab4645a914a91ff492735881150ddc8a79e'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/c3faf548a00f4c17100cc9204746975fa46a73b9'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
tags:
  - nvd
epss: 0.0044
epssPercentile: 0.36462
ingestedAt: '2026-10-14T13:30:58.540Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

bnxt_en: Disable EOP for TPA on all chips to prevent data corruption

EOP (End of frame padding) on the AGG ring may cause overlapping of
zero padding at the end of one segment with the next segment's data.
If Relaxed Ordering (RO) is enabled, the zero padding may overwrite
valid data in the next segment and corrupt the data.  Older chips
(P5 and older) do not automatically disable RO when EOP is enabled.
On some ARM systems, data corruption was reported on 57508 (P5)
chips with RO enabled.

Always disable EOP on all chips on the AGG rings when TPA is enabled
to fix the data corruption.

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.