Linux hwe edge: In the Linux kernel, the following vulnerability has been resolved: veth: fix queue index used to wake the peer txq in veth_poll veth_poll() derives… (CVE-2026-74742)

The Linux kernel's veth_poll() function incorrectly derives the index of the peer TX queue to wake from rq->xdp_rxq.queue_index, which is only initialized when an XDP program is attached. Without XDP, this field remains zero, causing all NAPI instances to wake peer TX queue 0 regardless of the actual queue that is stalled. If a peer TX queue (e.g., queue 1) is stopped due to a full ptr_ring (NETDEV_TX_BUSY), it is never woken again because the poller wakes queue 0 instead. Since veth does not implement ndo_tx_timeout, the queue remains stalled indefinitely. The fix derives the index from the position of rq within priv->rq, which is correct regardless of XDP usage. This vulnerability can cause a denial of service by stalling network traffic on affected queues.

This vulnerability results in a denial of service condition on the affected veth network interface by causing one or more transmit queues to stall indefinitely. This impacts availability but does not affect confidentiality or integrity. There is no indication of active exploitation in the wild.

A fix has been implemented in the Linux kernel to correctly derive the peer TX queue index regardless of XDP program attachment. Users should apply the official kernel updates that include this fix. Since this is a kernel-level issue, upgrading to a patched kernel version is the recommended remediation. No additional mitigations are indicated.