CVE-2026-90079

CVE-2026-90079 affects the octeontx2-af driver in the Linux kernel. The root cause is a memory-lifecycle bug in rvu_mbox_init(), which is called separately for AF-PF mailboxes during probe and for AF-VF mailboxes when SR-IOV is enabled. Each call allocated a new ng_rvu object, leaking the first a...