CVE-2026-98806octeontx2-pf: Fix aura BPID assignment when CONFIG_DCB is enabled
Updated under an hour ago ()
Does this affect you?
It affects Linux. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: octeontx2-pf: Fix aura BPID assignment when CONFIG_DCB is enabled Previously, BPID assignment under CONFIG_DCB assumed `queue_to_pfc_map` was always initialized. For SDP VFs this leads to invalid memory access as it was not initialized. This patch adds a NULL check for `queue_to_pfc_map` before dereferencing it. Also, simplifies the logic by always assigning a default BPID first, then conditionally overriding it if CONFIG_DCB is enabled and the map exists.
- CVSS
- Not yet scored
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Received
- Record last updated
- Oct 18, 2026
- First seen by InfoSec Signals
- Oct 18, 2026
Affected products
Linux Linux linux:linux (from the name) | 184fb40f731bd3353b0887731f7caba66609e9cd builds before 59fbbded05e559675930fd521b8d62b72828b52d; from 184fb40f731bd3353b0887731f7caba66609e9cd before 056994563935e049093f100efaad7e63ad113814; 22079d5ae4a33679150f7de89f4107f4e0446886; from 6.14.9 before 6.15 | CNA record |
References
- https://git.kernel.org/stable/c/59fbbded05e559675930fd521b8d62b72828b52d
- https://git.kernel.org/stable/c/056994563935e049093f100efaad7e63ad113814
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.