CVE-2026-93279

staging: octeon: add missing tasklet_kill in cvm_oct_tx_shutdown

State: Published
Severity: Not scored
Published: Sep 24, 2026
Updated: Oct 19, 2026
Reserved: Sep 17, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

staging: octeon: add missing tasklet_kill in cvm_oct_tx_shutdown

The TX cleanup tasklet can be scheduled by the watchdog IRQ handler to execute cvm_oct_tx_do_cleanup. There can be a pending tasklet in the queue which might run after the cvm_oct_remove() frees net_device structures, causing a use-after-free in cvm_oct_tx_do_cleanup() as it iterates cvm_oct_device[] which is an array of netdevice pointers. Add tasklet_kill() after free_irq() to ensure the tasklet is no longer scheduled or running before teardown proceeds.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	4898c560103fb8075c10a8e9d70e0ca26873075e to before 32efcb6d5f4e3f030e7b0a3ba5c6c0684dd07486Affected 4898c560103fb8075c10a8e9d70e0ca26873075e to before d15226338dfaa84ffff142d32723cdf74d0c47c4Affected 4898c560103fb8075c10a8e9d70e0ca26873075e to before a77efd85e0d48c877f66d2bc3ab89cc1b8dacd19Affected 4898c560103fb8075c10a8e9d70e0ca26873075e to before b6365e4186322858a82c8713b1d0bd209c8e765aAffected 4898c560103fb8075c10a8e9d70e0ca26873075e to before 03d12490afd1198310ad0aba42462329832eb739Affected 4898c560103fb8075c10a8e9d70e0ca26873075e to before 2c0c9956596e48654bb4855e2a0742748a0826a7Affected 4898c560103fb8075c10a8e9d70e0ca26873075e to before 41a79bd9e5a74f8f483b3b206d10567912874fb4Affected 4898c560103fb8075c10a8e9d70e0ca26873075e to before b9af44b0d20b2247c4eb0ea5cfca907d643eea50Affected
LinuxLinux	2.6.34Affected before 2.6.34Not affected 5.10.270 through 5.10.Not affected 5.15.221 through 5.15.Not affected 6.1.188 through 6.1.Not affected 6.6.157 through 6.6.Not affected 6.12.110 through 6.12.Not affected 6.18.52 through 6.18.Not affected 7.2.6 through 7.2.*Not affected 7.3 and laterNot affected

Product

Versions

LinuxLinux

4898c560103fb8075c10a8e9d70e0ca26873075e to before 32efcb6d5f4e3f030e7b0a3ba5c6c0684dd07486Affected
4898c560103fb8075c10a8e9d70e0ca26873075e to before d15226338dfaa84ffff142d32723cdf74d0c47c4Affected
4898c560103fb8075c10a8e9d70e0ca26873075e to before a77efd85e0d48c877f66d2bc3ab89cc1b8dacd19Affected
4898c560103fb8075c10a8e9d70e0ca26873075e to before b6365e4186322858a82c8713b1d0bd209c8e765aAffected
4898c560103fb8075c10a8e9d70e0ca26873075e to before 03d12490afd1198310ad0aba42462329832eb739Affected
4898c560103fb8075c10a8e9d70e0ca26873075e to before 2c0c9956596e48654bb4855e2a0742748a0826a7Affected
4898c560103fb8075c10a8e9d70e0ca26873075e to before 41a79bd9e5a74f8f483b3b206d10567912874fb4Affected
4898c560103fb8075c10a8e9d70e0ca26873075e to before b9af44b0d20b2247c4eb0ea5cfca907d643eea50Affected

LinuxLinux

2.6.34Affected
before 2.6.34Not affected
5.10.270 through 5.10.*Not affected
5.15.221 through 5.15.*Not affected
6.1.188 through 6.1.*Not affected
6.6.157 through 6.6.*Not affected
6.12.110 through 6.12.*Not affected
6.18.52 through 6.18.*Not affected
7.2.6 through 7.2.*Not affected
7.3 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.