-

CVE-2026-93246

octeontx2-af: fix out-of-bounds read setting MSI-X irq affinity

In the Linux kernel, the following vulnerability has been resolved:

octeontx2-af: fix out-of-bounds read setting MSI-X irq affinity

rvu_register_interrupts() walks every MSI-X vector and uses strstr()
to match "Mbox" or "FLR" in irq_name before pinning those interrupts
to CPU 0. irq_name is a per-vector NAME_SIZE buffer, but not every
slot is populated before this loop runs. strstr() keeps scanning until
it finds a NUL terminator, so an uninitialized slot can trigger a KASAN
slab-out-of-bounds read at boot when debug options are enabled.

Use strnstr() with NAME_SIZE to bound the search within each vector's
name buffer.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
≫
Produkt Linux
Default Statusunaffected
Version 4e527f1e5c155ce28164ba34cad47b635d16f827
Version < 2f460aa0211e97c011ef0cfe5016f8f2a2ed059b
Status affected
Version 4e527f1e5c155ce28164ba34cad47b635d16f827
Version < 4d5df98369c5f45710b786499f8bd7ffc3196433
Status affected
HerstellerLinux
≫
Produkt Linux
Default Statusaffected
Version 7.1
Status affected
Version 0
Version < 7.1
Status unaffected
Version <= 7.2.*
Version 7.2.6
Status unaffected
Version <= *
Version 7.3-rc1
Status unaffected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.19% 0.076
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://git.kernel.org/stable/c/2f460aa0211e97c011ef0cfe5016f8f2a2ed059b
https://git.kernel.org/stable/c/4d5df98369c5f45710b786499f8bd7ffc3196433