CVE-2026-64225

The CVE affects the Linux kernel’s octeontx2-af CGX path, where cgx_speed_mbps (13 elements) is indexed by RESP_LINKSTAT_SPEED (0–15). The missing bounds check allows an out-of-bounds access when the index is >= 13. The fixed code adds a bounds check and defaults to speed 0 if the index is out...

EUVD-2026-48633

In the Linux kernel, the following vulnerability has been resolved: octeontx2-af: CGX: add bounds check to cgxspeedmbps index cgxspeedmbps has 13 elements but RESPLINKSTATSPEED can yield values 0-15. If it returns a value = 13, this causes an out-of-bounds array access. Add a bounds check and...

PT-2026-64340

In the Linux kernel, the following vulnerability has been resolved: octeontx2-af: CGX: add bounds check to cgx speed mbps index cgx speed mbps has 13 elements but RESP LINKSTAT SPEED can yield values 0-15. If it returns a value = 13, this causes an out-of-bounds array access. Add a bounds check a...