CVE-2026-80629

octeontx2-af: npc: Fix size of entry2cntr_map

State: Published
Severity: Not scored
Published: Aug 28, 2026
Updated: Oct 30, 2026
Reserved: Aug 26, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

octeontx2-af: npc: Fix size of entry2cntr_map

KASAN prints below splat. This is caused by allocating counter for reserved mcam entry for cpt 2nd pass entry. But mcam->entry2cntr_map is not allocated for reserved entries.

BUG: KASAN: slab-out-of-bounds in npc_map_mcam_entry_and_cntr+0xb0/0x1a0 Write of size 2 at addr ffff0001033e7ffe by task kworker/0:1/14

CPU: 0 PID: 14 Comm: kworker/0:1 Not tainted 6.1.67 #1 Hardware name: Marvell CN106XX board (DT) Workqueue: events work_for_cpu_fn Call trace: dump_backtrace.part.0+0xe4/0xf0 show_stack+0x18/0x30 dump_stack_lvl+0x88/0xb4 print_report+0x154/0x458 kasan_report+0xb8/0x194 __asan_store2+0x7c/0xa0 npc_map_mcam_entry_and_cntr+0xb0/0x1a0 rvu_mbox_handler_npc_mcam_write_entry+0x268/0x280 npc_install_flow+0x840/0xfe0 rvu_npc_install_cpt_pass2_entry+0x138/0x190 rvu_nix_init+0x148c/0x2880 rvu_probe+0x1800/0x30b0 local_pci_probe+0x78/0xe0 work_for_cpu_fn+0x30/0x50 process_one_work+0x4cc/0x97c worker_thread+0x360/0x630 kthread+0x1a0/0x1b0 ret_from_fork+0x10/0x20

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	55307fcb925846d760ed80f4a8359dd4331c52bd to before b7727c4d6f1d3bf85fec781ffe2b3c7ba4c1ecdcAffected 55307fcb925846d760ed80f4a8359dd4331c52bd to before 30e5ee98e86ad47c76695458987097e849d0611aAffected 55307fcb925846d760ed80f4a8359dd4331c52bd to before de8e3a4004c5df9461974352e9d7ff0f8313c508Affected 55307fcb925846d760ed80f4a8359dd4331c52bd to before 1d072cc3ba4338d6b2acb85d50a3af5cf2b12a3eAffected 55307fcb925846d760ed80f4a8359dd4331c52bd to before 2477c523c6e69733d51101ae9bd2dfc0a054b13dAffected 55307fcb925846d760ed80f4a8359dd4331c52bd to before f9cd6fabe0e7c7f6fc30c6c192c7ed72aba37232Affected
LinuxLinux	5.11Affected before 5.11Not affected 6.1.191 through 6.1.Not affected 6.6.160 through 6.6.Not affected 6.12.97 through 6.12.Not affected 6.18.40 through 6.18.Not affected 7.1.5 through 7.1.*Not affected 7.2 and laterNot affected

Product

Versions

LinuxLinux

55307fcb925846d760ed80f4a8359dd4331c52bd to before b7727c4d6f1d3bf85fec781ffe2b3c7ba4c1ecdcAffected
55307fcb925846d760ed80f4a8359dd4331c52bd to before 30e5ee98e86ad47c76695458987097e849d0611aAffected
55307fcb925846d760ed80f4a8359dd4331c52bd to before de8e3a4004c5df9461974352e9d7ff0f8313c508Affected
55307fcb925846d760ed80f4a8359dd4331c52bd to before 1d072cc3ba4338d6b2acb85d50a3af5cf2b12a3eAffected
55307fcb925846d760ed80f4a8359dd4331c52bd to before 2477c523c6e69733d51101ae9bd2dfc0a054b13dAffected
55307fcb925846d760ed80f4a8359dd4331c52bd to before f9cd6fabe0e7c7f6fc30c6c192c7ed72aba37232Affected

LinuxLinux

5.11Affected
before 5.11Not affected
6.1.191 through 6.1.*Not affected
6.6.160 through 6.6.*Not affected
6.12.97 through 6.12.*Not affected
6.18.40 through 6.18.*Not affected
7.1.5 through 7.1.*Not affected
7.2 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.