CVE-2026-80629

CVE-2026-80629 is a slab-out-of-bounds write in the Linux kernel's octeontx2-af NPC (Network Policy Classifier) driver. The bug occurs when a counter is allocated for a reserved MCAM entry used by the CPT 2nd pass, while mcam->entry2cntr_map was not sized to cover reserved entries, resulting i...

CVE-2026-80629 octeontx2-af: npc: Fix size of entry2cntr_map

In the Linux kernel, the following vulnerability has been resolved: octeontx2-af: npc: Fix size of entry2cntrmap KASAN prints below splat. This is caused by allocating counter for reserved mcam entry for cpt 2nd pass entry. But mcam-entry2cntrmap is not allocated for reserved entries. BUG: KASAN:...

EUVD-2026-67505

In the Linux kernel, the following vulnerability has been resolved: octeontx2-af: npc: Fix size of entry2cntrmap KASAN prints below splat. This is caused by allocating counter for reserved mcam entry for cpt 2nd pass entry. But mcam-entry2cntrmap is not allocated for reserved entries. BUG: KASAN:...

CVE-2026-80629: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: octeontx2-af: npc: Fix size of entry2cntrmap KASAN prints below splat. This is caused by allocating counter for reserved mcam entry for cpt 2nd pass entry. But mcam-entry2cntrmap is not allocated for reserved entries. BUG: KASAN:...

PT-2026-82929

In the Linux kernel, the following vulnerability has been resolved: octeontx2-af: npc: Fix size of entry2cntr map KASAN prints below splat. This is caused by allocating counter for reserved mcam entry for cpt 2nd pass entry. But mcam-entry2cntr map is not allocated for reserved entries. BUG: KASA...

Linux Distros Unpatched Vulnerability : CVE-2026-80629

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - octeontx2-af: npc: Fix size of entry2cntrmap KASAN prints below splat. This is caused by allocating counter for reserved mcam entry for cpt 2nd pass entry. But...

SUSE CVE-2026-72045

In the Linux kernel, the following vulnerability has been resolved: octeontx2-af: cn10k: restrict VF LMTLINE sharing to its own PF rvumboxhandlerlmtsttblsetup uses req-basepcifunc as a direct index into the LMT map table to read another function's LMTLINE physical base address and copy it into th...

SUSE CVE-2026-72050

In the Linux kernel, the following vulnerability has been resolved: octeontx2-af: Free BPID bitmap on setup failure nixsetupbpids allocates bp-bpids with rvuallocbitmap, which uses a plain kcalloc. If any of the following devmkcalloc allocations for the BPID mapping arrays fails, the function...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: octeontx2-af: Validates NIX’s maximum number of LFs correctly. NIX’s maximum number of LFs can be set using the devlink command. However, this can be done before assigning any LFs to a PF/VF. The condition used to check whether a...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: octeontx2-af: cn10k – Restricted VF LMTLINE sharing to its own PF. rvumboxhandlerlmtsttblsetup uses req-basepcifunc as a direct index into the LMT map table to read the physical base address of another function’s LMTLINE and...

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: octeontx2-af: Fixed resource leaks related to MCAM entries. The teardown sequence in the FLR handler terminates if no NIX LF is attached to PF/VF. This indicates that graceful shutdown of resources has already occurred. Howeve...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, Linux, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: octeontx2-af: Separate handlers are used for interrupts. For the interrupt vector from PF to AF and the interrupt vector from VF to AF, the same interrupt handler is registered, which causes a race condition. When two interrupts...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: octeontx2-af: Failure to free the BPID bitmap during setup. The nixsetupbpids function allocates bp-bpids using rvuallocbitmap, which utilizes a plain kcalloc. If any of the allocations performed by devmkcalloc for the BPID...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: octeontx2-af: fixed the issue where VF bring-up affected the promiscuous state of PF. Mbox handling of nixsetrxmode for a VF with promiscuous and allmulti flags set to false causes deletion of the PF’s promiscuous and allmulti...

CVE-2026-74527

A flaw was found in the Linux kernel's octeontx2-af driver. When Physical Functions PFs and Virtual Functions VFs share a network interface controller's NIC hardware programming PKIND state, a Virtual Function could overwrite the configuration set by the Physical Function. This could lead to...

CVE-2026-72410

A flaw was found in the Linux kernel's octeontx2-af driver. This vulnerability stems from an incorrect validation check when setting the maximum number of NIX Logical Functions LFs using the devlink command. An attacker could potentially exploit this to configure the system in an unintended state...

CVE-2026-72050

A flaw was found in the octeontx2-af component of the Linux kernel. During the setup of BPID Back Pressure ID mapping arrays, if memory allocation fails, the BPID bitmap is not properly freed. This can lead to a memory leak, potentially impacting system stability or performance...

CVE-2026-72312

A flaw was found in the Linux kernel's octeontx2-af driver. A Virtual Function VF, which is a virtualized network interface, can inadvertently disable the promiscuous and all-multicast allmulti modes of the Physical Function PF network interface. This occurs because the underlying application...

Linux Distros Unpatched Vulnerability : CVE-2026-72050

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - octeontx2-af: Free BPID bitmap on setup failure nixsetupbpids allocates bp-bpids with rvuallocbitmap, which uses a plain kcalloc. If any of the following...

Linux Distros Unpatched Vulnerability : CVE-2026-72312

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - octeontx2-af: fix VF bringup affecting PF promiscuous state Mbox handling of nixsetrxmode for a VF with promiscuous and allmulti flags set to false causes...