CVE-2026-93278

staging: octeon: add missing napi_disable in cvm_oct_rx_shutdown

N/A
Published: September 24, 2026 at 03:52 PM UTC
Updated: October 19, 2026 at 10:17 AM UTC
1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Severity
N/A
Exploit prediction
EPSS 0.2%

Description

In the Linux kernel, the following vulnerability has been resolved: staging: octeon: add missing napi_disable in cvm_oct_rx_shutdown cvm_oct_rx_shutdown calls free_irq and netif_napi_del without disabling the napi instance first. As the free_irq only waits for completion of hard interrupt handlers, the napi poll function could still be active. If cvm_oct_remove proceeds to free the plat structure (which holds the NAPI instances), the active poll function will access freed memory, resulting in a use-after-free crash.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

2.6.343368c784bcf77124aaf39372e627016c36bd4472
Vendor states this is fixed in 158389d7af04bbf0664d91c2ce31fcc9eeace1eb (fixed)
Vendor states this is fixed in 89f9f433271fad9351de6a3c713b45b2cfb23e4a (fixed)
Vendor states this is fixed in 98f9036b2254c928cb44da0c77dba38f66f7d8f1 (fixed)
Vendor states this is fixed in b2243ffaac14cc3639b5b32a371aac37f96ee554 (fixed)
Vendor states this is fixed in b38fbd68cc36b4f478a1e3cfc169b8616ae1337d (fixed)
Vendor states this is fixed in c0a9a8586a63fda49e61a6b83360feac2a60d898 (fixed)
Vendor states this is fixed in c124049c3a7006fd6caf629139a5722610bbffb4 (fixed)
Vendor states this is fixed in 2.6.34 (unaffected)
Vendor states this is fixed in 5.15.221 (unaffected)
Vendor states this is fixed in 6.1.188 (unaffected)
Vendor states this is fixed in 6.12.110 (unaffected)
Vendor states this is fixed in 6.18.52 (unaffected)
Vendor states this is fixed in 6.6.157 (unaffected)
Vendor states this is fixed in 7.2.6 (unaffected)
Vendor states this is fixed in 7.3 (unaffected)
Vendor states this is fixed in 7.3-rc1 (unaffected)

Remediation

No guide yet

No remediation guidance has been written for this CVE yet, and no fixed version or vendor advisory is recorded against it.

Quick Info

StatusRECEIVED

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Free plan, no card