Riskcovery

CVE-2026-23070

Octeontx2-af: Add proper checks for fwdata

State
Published
Severity
Not scored
Published
Feb 4, 2026
Updated
May 11, 2026
Reserved
Jan 13, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

Octeontx2-af: Add proper checks for fwdata

firmware populates MAC address, link modes (supported, advertised) and EEPROM data in shared firmware structure which kernel access via MAC block(CGX/RPM).

Accessing fwdata, on boards booted with out MAC block leading to kernel panics.

Internal error: Oops: 0000000096000005 [#1] SMP [ 10.460721] Modules linked in: [ 10.463779] CPU: 0 UID: 0 PID: 174 Comm: kworker/0:3 Not tainted 6.19.0-rc5-00154-g76ec646abdf7-dirty #3 PREEMPT [ 10.474045] Hardware name: Marvell OcteonTX CN98XX board (DT) [ 10.479793] Workqueue: events work_for_cpu_fn [ 10.484159] pstate: 80400009 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 10.491124] pc : rvu_sdp_init+0x18/0x114 [ 10.495051] lr : rvu_probe+0xe58/0x1d18

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 997814491cee7b19c162ad82439818e555f99ad9 to before 079050a23de6b7505595e4af75b36c34f0e9627eAffected
  • 997814491cee7b19c162ad82439818e555f99ad9 to before e343973fab43c266a40e4e0dabdc4216db6d5effAffected
  • 997814491cee7b19c162ad82439818e555f99ad9 to before 4a3dba48188208e4f66822800e042686784d29d1Affected
LinuxLinux
  • 6.9Affected
  • before 6.9Not affected
  • 6.12.78 through 6.12.*Not affected
  • 6.18.8 through 6.18.*Not affected
  • 6.19 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.