The Linux kernel vulnerability CVE-2026-74659 involves the net: bridge: mrp component where the function br_mrp_alloc_test_skb() builds MRP test frames using dev_alloc_skb(), which does not clear the linear data area. The sub-option TLV header's length field was never written, and trailing alignment bytes were appended without clearing, leaving three uninitialized bytes in every MRA MRP_Test frame sent on the network. The fix involves using skb_put_zero() to allocate and zero the sub-option TLV header and alignment padding, ensuring no uninitialized data is transmitted.

The vulnerability results in uninitialized memory bytes being transmitted in MRP test frames. While the direct security impact is not explicitly detailed, sending uninitialized memory can potentially leak sensitive kernel memory contents or cause undefined behavior in network devices processing these frames. No known exploits in the wild have been reported.

A fix has been implemented in the Linux kernel to zero the relevant bytes before sending MRP test frames, eliminating the uninitialized data leak. Users should apply the official Linux kernel updates that include this fix. Patch status is not explicitly confirmed in the provided data; therefore, check the vendor advisory or Linux kernel mailing lists for the exact fixed versions and update accordingly.