{"id":11920,"date":"2026-09-04T18:53:57","date_gmt":"2026-09-04T10:53:57","guid":{"rendered":"https:\/\/www.54iter.cn\/?vuln=cve-2026-74737"},"modified":"2026-09-04T18:53:57","modified_gmt":"2026-09-04T10:53:57","slug":"cve-2026-74737","status":"publish","type":"vuln","link":"https:\/\/www.54iter.cn\/?vuln=cve-2026-74737","title":{"rendered":"CVE-2026-74737 [CRITICAL] &#8211; In the Linux kernel, the following vulnerability has been resolved:\n\nnet: ethernet: ti: am"},"content":{"rendered":"<p>In the Linux kernel, the following vulnerability has been resolved:<\/p>\n<p>net: ethernet: ti: am65-cpsw-nuss: Fix port_id extraction from SRC TAG<\/p>\n<p>On the packet reception path, the ID of the MAC Port on which the packet<br \/>\nwas received, is embedded in the RX DMA Descriptor&#8217;s metadata. The ID is<br \/>\nextracted using the helper function cppi5_desc_get_tags_ids() which fills<br \/>\nin the 16-bit Source Tag into the &#8216;port_id&#8217; variable. However, it is only<br \/>\nthe lower 8-bits of the 16-bit Source Tag that represent the MAC Port ID,<br \/>\nwhile the upper 8-bits are Hardware-Reserved and carry an arbitrary value.<br \/>\nWith the existing logic, sporadic kernel crash is observed due to the<br \/>\nsubsequent driver code accessing out-of-bound memory because of an invalid<br \/>\nport_id.<\/p>\n<p>Hence, fix the port_id extraction logic to use only the lower 8-bits of the<br \/>\nSource Tag as the MAC Port ID.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>In the Linux kernel, the following vulnerability has been resolved:<\/p>\n<p>net: ethernet: ti: am65-cpsw-nuss: Fix port_id extraction from SRC TAG<\/p>\n<p>On the packet reception path, the ID of the MAC Port on whi<\/p>\n","protected":false},"template":"","meta":[],"categories":[],"tags":[],"class_list":["post-11920","vuln","type-vuln","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=\/wp\/v2\/vuln\/11920","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=\/wp\/v2\/vuln"}],"about":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=\/wp\/v2\/types\/vuln"}],"wp:attachment":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=11920"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.54iter.cn\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=11920"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.54iter.cn\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=11920"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}