Riskcovery

CVE-2026-46188

octeon_ep_vf: add NULL check for napi_build_skb()

State
Published
Severity
Not scored
Published
May 28, 2026
Updated
Jun 14, 2026
Reserved
May 13, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

octeon_ep_vf: add NULL check for napi_build_skb()

napi_build_skb() can return NULL on allocation failure. In __octep_vf_oq_process_rx(), the result is used directly without a NULL check in both the single-buffer and multi-fragment paths, leading to a NULL pointer dereference.

Add NULL checks after both napi_build_skb() calls, properly advancing descriptors and consuming remaining fragments on failure.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 1cd3b407977c3ab1d2ddc26cb7113e7fb1509cd1 to before 60246cdd4c515ea7d920cddf48932efcb990773eAffected
  • 1cd3b407977c3ab1d2ddc26cb7113e7fb1509cd1 to before b0f4711b426a06fb4c4be85c36b9f5588d5140d3Affected
  • 1cd3b407977c3ab1d2ddc26cb7113e7fb1509cd1 to before 6fef6640bbf360e254cc0174365ed30ce3a07572Affected
  • 1cd3b407977c3ab1d2ddc26cb7113e7fb1509cd1 to before dd66b42854705e4e4ee7f14d260f86c578bed3e3Affected
LinuxLinux
  • 6.9Affected
  • before 6.9Not affected
  • 6.12.88 through 6.12.*Not affected
  • 6.18.30 through 6.18.*Not affected
  • 7.0.7 through 7.0.*Not affected
  • 7.1 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.