CVE-2026-93279

staging: octeon: add missing tasklet_kill in cvm_oct_tx_shutdown

N/A
Published: September 24, 2026 at 03:52 PM UTC
Updated: October 19, 2026 at 10:17 AM UTC
1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Severity
N/A
Exploit prediction
EPSS 0.2%

Description

In the Linux kernel, the following vulnerability has been resolved: staging: octeon: add missing tasklet_kill in cvm_oct_tx_shutdown The TX cleanup tasklet can be scheduled by the watchdog IRQ handler to execute cvm_oct_tx_do_cleanup. There can be a pending tasklet in the queue which might run after the cvm_oct_remove() frees net_device structures, causing a use-after-free in cvm_oct_tx_do_cleanup() as it iterates cvm_oct_device[] which is an array of netdevice pointers. Add tasklet_kill() after free_irq() to ensure the tasklet is no longer scheduled or running before teardown proceeds.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

2.6.344898c560103fb8075c10a8e9d70e0ca26873075e
Vendor states this is fixed in 03d12490afd1198310ad0aba42462329832eb739 (fixed)
Vendor states this is fixed in 2c0c9956596e48654bb4855e2a0742748a0826a7 (fixed)
Vendor states this is fixed in 32efcb6d5f4e3f030e7b0a3ba5c6c0684dd07486 (fixed)
Vendor states this is fixed in 41a79bd9e5a74f8f483b3b206d10567912874fb4 (fixed)
Vendor states this is fixed in a77efd85e0d48c877f66d2bc3ab89cc1b8dacd19 (fixed)
Vendor states this is fixed in b6365e4186322858a82c8713b1d0bd209c8e765a (fixed)
Vendor states this is fixed in b9af44b0d20b2247c4eb0ea5cfca907d643eea50 (fixed)
Vendor states this is fixed in d15226338dfaa84ffff142d32723cdf74d0c47c4 (fixed)
Vendor states this is fixed in 2.6.34 (unaffected)
Vendor states this is fixed in 5.10.270 (unaffected)
Vendor states this is fixed in 5.15.221 (unaffected)
Vendor states this is fixed in 6.1.188 (unaffected)
Vendor states this is fixed in 6.12.110 (unaffected)
Vendor states this is fixed in 6.18.52 (unaffected)
Vendor states this is fixed in 6.6.157 (unaffected)
Vendor states this is fixed in 7.2.6 (unaffected)
Vendor states this is fixed in 7.3 (unaffected)
Vendor states this is fixed in 7.3-rc1 (unaffected)

Remediation

No guide yet

No remediation guidance has been written for this CVE yet, and no fixed version or vendor advisory is recorded against it.

Quick Info

StatusRECEIVED

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Free plan, no card