CVE-2026-90079

CVE-2026-90079 affects the octeontx2-af driver in the Linux kernel. The root cause is a memory-lifecycle bug in rvu_mbox_init(), which is called separately for AF-PF mailboxes during probe and for AF-VF mailboxes when SR-IOV is enabled. Each call allocated a new ng_rvu object, leaking the first a...

CVE-2026-90079 octeontx2-af: fix cn20k mailbox lifetime on repeated rvu_mbox_init()

In the Linux kernel, the following vulnerability has been resolved: octeontx2-af: fix cn20k mailbox lifetime on repeated rvumboxinit rvumboxinit is called separately for AF-PF mailboxes during probe and for AF-VF mailboxes when SR-IOV is enabled. Each call used to allocate a new ngrvu object,...