CVE-2026-74527

octeontx2-af: Block VFs from clobbering special CGX PKIND state

State: Published
Severity: 8.8 High
Published: Aug 15, 2026
Updated: Oct 30, 2026
Reserved: Aug 15, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

octeontx2-af: Block VFs from clobbering special CGX PKIND state

PF and VF NIX LFs that share a CGX LMAC reuse the same hardware PKIND programming. When HiGig2 or EDSA parsing is enabled, a VF NIX LF alloc must not reset the LMAC RX PKIND or default TX parse config over the PF setup.

Add cgx_get_pkind() and rvu_cgx_is_pkind_config_permitted() so VFs skip cgx_set_pkind(), rvu_npc_set_pkind(), and NIX_AF_LFX_TX_PARSE_CFG updates when the LMAC is using NPC_RX_HIGIG_PKIND or NPC_RX_EDSA_PKIND.

Scores

CVSS	Score	Vector	Source
3.1	8.8 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H	Linux

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	94d942c5fb970ac2166216838b278613decfa9a0 to before f24f7ce6fb2d1ae080a05371afddba30a3e0b919Affected 94d942c5fb970ac2166216838b278613decfa9a0 to before 1106b26e86ac1e7e4d1f634bcd532c5d44e60620Affected 94d942c5fb970ac2166216838b278613decfa9a0 to before 7e888d7dd11519330ba6c6a28391d55891463a6aAffected 94d942c5fb970ac2166216838b278613decfa9a0 to before a76243488740a07c81c9adf431685bb7f7c31d8cAffected 94d942c5fb970ac2166216838b278613decfa9a0 to before d3c6b0f48f126a36955b3fb4154a59d0b3621d97Affected 94d942c5fb970ac2166216838b278613decfa9a0 to before 3bd438a58e910db5dc369aa25dfed1fc95f1b596Affected
LinuxLinux	4.20Affected before 4.20Not affected 6.1.191 through 6.1.Not affected 6.6.160 through 6.6.Not affected 6.12.114 through 6.12.Not affected 6.18.57 through 6.18.Not affected 7.1.8 through 7.1.*Not affected 7.2 and laterNot affected

Product

Versions

LinuxLinux

94d942c5fb970ac2166216838b278613decfa9a0 to before f24f7ce6fb2d1ae080a05371afddba30a3e0b919Affected
94d942c5fb970ac2166216838b278613decfa9a0 to before 1106b26e86ac1e7e4d1f634bcd532c5d44e60620Affected
94d942c5fb970ac2166216838b278613decfa9a0 to before 7e888d7dd11519330ba6c6a28391d55891463a6aAffected
94d942c5fb970ac2166216838b278613decfa9a0 to before a76243488740a07c81c9adf431685bb7f7c31d8cAffected
94d942c5fb970ac2166216838b278613decfa9a0 to before d3c6b0f48f126a36955b3fb4154a59d0b3621d97Affected
94d942c5fb970ac2166216838b278613decfa9a0 to before 3bd438a58e910db5dc369aa25dfed1fc95f1b596Affected

LinuxLinux

4.20Affected
before 4.20Not affected
6.1.191 through 6.1.*Not affected
6.6.160 through 6.6.*Not affected
6.12.114 through 6.12.*Not affected
6.18.57 through 6.18.*Not affected
7.1.8 through 7.1.*Not affected
7.2 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.