CVE-2026-46249
octeontx2-af: Fix PF driver crash with kexec kernel booting
MEDIUM 5.5
At a glance
- Source
- NVD
- EPSS
- EPSS 0.11 % · percentile 2 ()
- State
- PUBLISHED
- Published
- Updated
- Assigner
- Linux
- NVD status
- Analyzed
Description
In the Linux kernel, the following vulnerability has been resolved: octeontx2-af: Fix PF driver crash with kexec kernel booting During a kexec reboot the hardware is not power-cycled, so AF state from the old kernel can persist into the new kernel. When AF and PF drivers are built as modules, the PF driver may probe before AF reinitializes the hardware. The PF driver treats the RVUM block revision as an indication that AF initialization is complete. If this value is left uncleared at shutdown, PF may incorrectly assume AF is ready and access stale hardware state, leading to a crash. Clear the RVUM block revision during AF shutdown to avoid PF mis-detecting AF readiness after kexec.
References
- https://git.kernel.org/stable/c/b7605b9301abc18fbbf2b0e23fdd281fc768955d
- https://git.kernel.org/stable/c/9769a09afda20a006b528b9e723effcae45965b2
- https://git.kernel.org/stable/c/57821d1436ba1c6a6973aa32d54166fdec35558c
- https://git.kernel.org/stable/c/8b5ed7c5417b7013d35b6f2507dab739013ba1a9
- https://git.kernel.org/stable/c/7d56ba306e93d04696718963fb4cda2883ee7585
- https://git.kernel.org/stable/c/9c3398e5b3a914b74276d44ab54c49123b89c61a
- https://git.kernel.org/stable/c/1370736836a18b5e0cd74bcc9cffe11d21f1fe79
- https://git.kernel.org/stable/c/2d2d574309e3ae84ee794869a5da8b4c38753a94
Scores
| Version | Score | Vector | Scored by |
|---|---|---|---|
| CVSS 3.1 | MEDIUM 5.5 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H | NVD · nvd@nist.gov (Primary) |
European references
- ENISA EUVD · EUVD-2026-34111
- GCVE · GCVE-0-2026-46249
CERT-FR advisories
- CERTFR-2026-AVI-1229 — Multiples vulnérabilités dans le noyau Linux d'Ubuntu · cert.ssi.gouv.fr
- CERTFR-2026-AVI-1093 — Multiples vulnérabilités dans le noyau Linux d'Ubuntu · cert.ssi.gouv.fr
- CERTFR-2026-AVI-1064 — Multiples vulnérabilités dans le noyau Linux de SUSE · cert.ssi.gouv.fr
- CERTFR-2026-AVI-0985 — Multiples vulnérabilités dans le noyau Linux d'Ubuntu · cert.ssi.gouv.fr
- CERTFR-2026-AVI-0954 — Multiples vulnérabilités dans le noyau Linux d'Ubuntu · cert.ssi.gouv.fr
- CERTFR-2026-AVI-0927 — Multiples vulnérabilités dans le noyau Linux de SUSE · cert.ssi.gouv.fr
- CERTFR-2026-AVI-0926 — Multiples vulnérabilités dans le noyau Linux d'Ubuntu · cert.ssi.gouv.fr
- CERTFR-2026-AVI-0861 — Multiples vulnérabilités dans le noyau Linux d'Ubuntu · cert.ssi.gouv.fr
- CERTFR-2026-AVI-0831 — Multiples vulnérabilités dans le noyau Linux d'Ubuntu · cert.ssi.gouv.fr
Affected configurations (NVD CPE)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*≥ 4.20 < 5.10.252cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*≥ 5.11 < 5.15.202cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*≥ 5.16 < 6.1.165cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*≥ 6.2 < 6.6.128cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*≥ 6.7 < 6.12.75cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*≥ 6.13 < 6.18.14cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*≥ 6.19 < 6.19.4
Affected products
| Product | Versions |
|---|---|
| Linux · Linux | affected 54494aa5d1e68945dc79feb7c8461cd382e11d8a < b7605b9301abc18fbbf2b0e23fdd281fc768955d ; affected 54494aa5d1e68945dc79feb7c8461cd382e11d8a < 9769a09afda20a006b528b9e723effcae45965b2 ; affected 54494aa5d1e68945dc79feb7c8461cd382e11d8a < 57821d1436ba1c6a6973aa32d54166fdec35558c ; affected 54494aa5d1e68945dc79feb7c8461cd382e11d8a < 8b5ed7c5417b7013d35b6f2507dab739013ba1a9 ; affected 54494aa5d1e68945dc79feb7c8461cd382e11d8a < 7d56ba306e93d04696718963fb4cda2883ee7585 ; affected 54494aa5d1e68945dc79feb7c8461cd382e11d8a < 9c3398e5b3a914b74276d44ab54c49123b89c61a |
| Linux · Linux | affected 4.20 ; unaffected 0 < 4.20 ; unaffected 5.10.252 ≤ 5.10.* ; unaffected 5.15.202 ≤ 5.15.* ; unaffected 6.1.165 ≤ 6.1.* ; unaffected 6.6.128 ≤ 6.6.* |
Sources
| Source | Licence |
|---|---|
| CVE List (CVEProject cvelistV5) | CVE Program Terms of Use |
| EPSS (FIRST.org) | FIRST — attribution requested |
| ENISA EUVD | ENISA — reproduction authorised, source acknowledged |
| CERT-FR (ANSSI) | Licence Ouverte / Etalab 2.0 |
| NVD (NIST) via fkie-cad/nvd-json-data-feeds | Public domain — this product uses data from the NVD API but is not endorsed or certified by the NVD |