Linux Distros Unpatched Vulnerability : CVE-2026-90084

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - octeontx2-vf: fix workqueue and netdev race in probe/remove Initialize the VF workqueue before registernetdev so ndosetrxmode does not queue work on a NULL...

DEBIAN-CVE-2026-90084

In the Linux kernel, the following vulnerability has been resolved: octeontx2-vf: fix workqueue and netdev race in probe/remove Initialize the VF workqueue before registernetdev so ndosetrxmode does not queue work on a NULL workqueue. Unregister the netdev before destroying the workqueue, and add...

CVE-2026-90084

CVE-2026-90084 affects the octeontx2-vf driver in the Linux kernel . A race condition exists in the probe/remove path: the VF workqueue was initialized after register_netdev(), meaning ndo_set_rx_mode could queue work on a NULL workqueue before initialization completed. The fix reorders the initi...

PT-2026-94432

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists between the workqueue and netdev during the probe and remove processes in the octeontx2-vf driver. This occurs because the VF workqueue is not initialized before...

CVE-2026-43440

CVE-2026-43440 affects the Linux kernel net/mana driver, where during mana_gd_setup() cleanup a workqueue pointer (service_wq) could remain non-NULL after destroy_workqueue(), leading to a potential use-after-free if the pointer is checked after a failed setup. Connected advisories confirm the ro...