CVE-2026-64225

The CVE affects the Linux kernel’s octeontx2-af CGX path, where cgx_speed_mbps (13 elements) is indexed by RESP_LINKSTAT_SPEED (0–15). The missing bounds check allows an out-of-bounds access when the index is >= 13. The fixed code adds a bounds check and defaults to speed 0 if the index is out...