CVE-2026-80629

In the Linux kernel, the following vulnerability has been resolved: octeontx2-af: npc: Fix size of entry2cntrmap KASAN prints below splat. This is caused by allocating counter for reserved mcam entry for cpt 2nd pass entry. But mcam-entry2cntrmap is not allocated for reserved entries. BUG: KASAN:...

CVE-2026-80629

CVE-2026-80629 is a slab-out-of-bounds write in the Linux kernel's octeontx2-af NPC (Network Policy Classifier) driver. The bug occurs when a counter is allocated for a reserved MCAM entry used by the CPT 2nd pass, while mcam->entry2cntr_map was not sized to cover reserved entries, resulting i...

CVE-2026-80629 octeontx2-af: npc: Fix size of entry2cntr_map

In the Linux kernel, the following vulnerability has been resolved: octeontx2-af: npc: Fix size of entry2cntrmap KASAN prints below splat. This is caused by allocating counter for reserved mcam entry for cpt 2nd pass entry. But mcam-entry2cntrmap is not allocated for reserved entries. BUG: KASAN:...

EUVD-2026-67505

In the Linux kernel, the following vulnerability has been resolved: octeontx2-af: npc: Fix size of entry2cntrmap KASAN prints below splat. This is caused by allocating counter for reserved mcam entry for cpt 2nd pass entry. But mcam-entry2cntrmap is not allocated for reserved entries. BUG: KASAN:...

CVE-2026-80629 octeontx2-af: npc: Fix size of entry2cntr_map

In the Linux kernel, the following vulnerability has been resolved: octeontx2-af: npc: Fix size of entry2cntrmap KASAN prints below splat. This is caused by allocating counter for reserved mcam entry for cpt 2nd pass entry. But mcam-entry2cntrmap is not allocated for reserved entries. BUG: KASAN:...

CVE-2026-80629

In the Linux kernel, the following vulnerability has been resolved: octeontx2-af: npc: Fix size of entry2cntrmap KASAN prints below splat. This is caused by allocating counter for reserved mcam entry for cpt 2nd pass entry. But mcam-entry2cntrmap is not allocated for reserved entries. BUG: KASAN:...

Linux Distros Unpatched Vulnerability : CVE-2026-80629

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - octeontx2-af: npc: Fix size of entry2cntrmap KASAN prints below splat. This is caused by allocating counter for reserved mcam entry for cpt 2nd pass entry. But...

CVE-2026-80629: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: octeontx2-af: npc: Fix size of entry2cntrmap KASAN prints below splat. This is caused by allocating counter for reserved mcam entry for cpt 2nd pass entry. But mcam-entry2cntrmap is not allocated for reserved entries. BUG: KASAN:...

PT-2026-82929

Name of the Vulnerable Software and Affected Versions Linux kernel version 6.1.67 Description A slab-out-of-bounds write occurs in the npc map mcam entry and cntr function within the octeontx2-af driver. This issue is triggered when allocating a counter for a reserved mcam entry for a cpt 2nd pas...

SUSE CVE-2026-72045

In the Linux kernel, the following vulnerability has been resolved: octeontx2-af: cn10k: restrict VF LMTLINE sharing to its own PF rvumboxhandlerlmtsttblsetup uses req-basepcifunc as a direct index into the LMT map table to read another function's LMTLINE physical base address and copy it into th...

SUSE CVE-2026-72050

In the Linux kernel, the following vulnerability has been resolved: octeontx2-af: Free BPID bitmap on setup failure nixsetupbpids allocates bp-bpids with rvuallocbitmap, which uses a plain kcalloc. If any of the following devmkcalloc allocations for the BPID mapping arrays fails, the function...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: octeontx2-af: Validates NIX’s maximum number of LFs correctly. NIX’s maximum number of LFs can be set using the devlink command. However, this can be done before assigning any LFs to a PF/VF. The condition used to check whether a...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: octeontx2-af: Failure to free the BPID bitmap during setup. The nixsetupbpids function allocates bp-bpids using rvuallocbitmap, which utilizes a plain kcalloc. If any of the allocations performed by devmkcalloc for the BPID...

CVE-2026-74527

A flaw was found in the Linux kernel's octeontx2-af driver. When Physical Functions PFs and Virtual Functions VFs share a network interface controller's NIC hardware programming PKIND state, a Virtual Function could overwrite the configuration set by the Physical Function. This could lead to...

CVE-2026-72410

A flaw was found in the Linux kernel's octeontx2-af driver. This vulnerability stems from an incorrect validation check when setting the maximum number of NIX Logical Functions LFs using the devlink command. An attacker could potentially exploit this to configure the system in an unintended state...

CVE-2026-72050

A flaw was found in the octeontx2-af component of the Linux kernel. During the setup of BPID Back Pressure ID mapping arrays, if memory allocation fails, the BPID bitmap is not properly freed. This can lead to a memory leak, potentially impacting system stability or performance...

CVE-2026-72312

A flaw was found in the Linux kernel's octeontx2-af driver. A Virtual Function VF, which is a virtualized network interface, can inadvertently disable the promiscuous and all-multicast allmulti modes of the Physical Function PF network interface. This occurs because the underlying application...

Linux Distros Unpatched Vulnerability : CVE-2026-72410

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - octeontx2-af: Validate NIX maximum LFs correctly NIX maximum number of LFs can be set via devlink command but that can be done before assigning any LFs to a...

Linux Distros Unpatched Vulnerability : CVE-2026-72312

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - octeontx2-af: fix VF bringup affecting PF promiscuous state Mbox handling of nixsetrxmode for a VF with promiscuous and allmulti flags set to false causes...

Linux Distros Unpatched Vulnerability : CVE-2026-72050

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: octeontx2-af: Free BPID bitmap on setup failure nixsetupbpids allocates bp-bpids with...