CVE-2026-74527
Description
In the Linux kernel, the following vulnerability has been resolved: octeontx2-af: Block VFs from clobbering special CGX PKIND state PF and VF NIX LFs that share a CGX LMAC reuse the same hardware PKIND programming. When HiGig2 or EDSA parsing is enabled, a VF NIX LF alloc must not reset the LMAC RX PKIND or default TX parse config over the PF setup. Add cgx_get_pkind() and rvu_cgx_is_pkind_config_permitted() so VFs skip cgx_set_pkind(), rvu_npc_set_pkind(), and NIX_AF_LFX_TX_PARSE_CFG updates when the LMAC is using NPC_RX_HIGIG_PKIND or NPC_RX_EDSA_PKIND.
How to fix
- Linux Linuxf24f7ce6fb2d1ae080a05371afddba30a3e0b919, 1106b26e86ac1e7e4d1f634bcd532c5d44e60620, 7e888d7dd11519330ba6c6a28391d55891463a6a, a76243488740a07c81c9adf431685bb7f7c31d8c, d3c6b0f48f126a36955b3fb4154a59d0b3621d97, 3bd438a58e910db5dc369aa25dfed1fc95f1b596 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | 94d942c5fb970ac2166216838b278613decfa9a0 ≤ v < f24f7ce6fb2d1ae080a05371afddba30a3e0b919, 94d942c5fb970ac2166216838b278613decfa9a0 ≤ v < 1106b26e86ac1e7e4d1f634bcd532c5d44e60620, 94d942c5fb970ac2166216838b278613decfa9a0 ≤ v < 7e888d7dd11519330ba6c6a28391d55891463a6a, 94d942c5fb970ac2166216838b278613decfa9a0 ≤ v < a76243488740a07c81c9adf431685bb7f7c31d8c, 94d942c5fb970ac2166216838b278613decfa9a0 ≤ v < d3c6b0f48f126a36955b3fb4154a59d0b3621d97, 94d942c5fb970ac2166216838b278613decfa9a0 ≤ v < 3bd438a58e910db5dc369aa25dfed1fc95f1b596, 4.20 | f24f7ce6fb2d1ae080a05371afddba30a3e0b919, 1106b26e86ac1e7e4d1f634bcd532c5d44e60620, 7e888d7dd11519330ba6c6a28391d55891463a6a, a76243488740a07c81c9adf431685bb7f7c31d8c, d3c6b0f48f126a36955b3fb4154a59d0b3621d97, 3bd438a58e910db5dc369aa25dfed1fc95f1b596 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.