Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%
Buy Us a Coffee

CVE-2026-74527— octeontx2-af: Block VFs from clobbering special CGX PKIND state

CVSS 8.8 · High EPSS 0.12% · P2

Possible ATT&CK Techniques 1AI

T1059 · Command and Scripting Interpreter

Affected Version Matrix 6

VendorProductVersion RangeStatus
LinuxLinux94d942c5fb970ac2166216838b278613decfa9a0< d3c6b0f48f126a36955b3fb4154a59d0b3621d97affected
94d942c5fb970ac2166216838b278613decfa9a0< 3bd438a58e910db5dc369aa25dfed1fc95f1b596affected
4.20affected
< 4.20unaffected
7.1.8≤ 7.1.*unaffected
7.2≤ *unaffected
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2026-74527

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
octeontx2-af: Block VFs from clobbering special CGX PKIND state
Source: CVE Program / CVE List V5
Vulnerability Description
In the Linux kernel, the following vulnerability has been resolved: octeontx2-af: Block VFs from clobbering special CGX PKIND state PF and VF NIX LFs that share a CGX LMAC reuse the same hardware PKIND programming. When HiGig2 or EDSA parsing is enabled, a VF NIX LF alloc must not reset the LMAC RX PKIND or default TX parse config over the PF setup. Add cgx_get_pkind() and rvu_cgx_is_pkind_config_permitted() so VFs skip cgx_set_pkind(), rvu_npc_set_pkind(), and NIX_AF_LFX_TX_PARSE_CFG updates when the LMAC is using NPC_RX_HIGIG_PKIND or NPC_RX_EDSA_PKIND.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
Linux kernel 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Linux kernel是美国Linux基金会开源的一个操作系统内核。 Linux kernel 存在安全漏洞，该漏洞源于octeontx2-af驱动中CGX PKIND状态处理不当，PF和VF共享硬件PKIND编程时，VF NIX LF分配可能重置LMAC RX PKIND或默认TX解析配置，覆盖PF的设置。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

VendorProductAffected VersionsCPESubscribe
LinuxLinux 94d942c5fb970ac2166216838b278613decfa9a0 ~ d3c6b0f48f126a36955b3fb4154a59d0b3621d97 -
LinuxLinux 4.20 -

II. Public POCs for CVE-2026-74527

#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2026-74527

请登录查看更多情报信息。

Patches & Fixes for CVE-2026-74527 (2)

Same Patch Batch · Linux · 2026-08-15 · 846 CVEs total

CVE-2026-7242110.0 CRITICALipv4: fib: Don't ignore error route in local/main tables.
CVE-2026-7427910.0 CRITICALcrypto: cavium/cpt - fix DMA cleanup using wrong loop index
CVE-2026-7447510.0 CRITICALvxlan: use neigh_ha_snapshot() in route_shortcircuit()
CVE-2026-7428010.0 CRITICALcrypto: marvell/octeontx - fix DMA cleanup using wrong loop index
CVE-2026-7430910.0 CRITICALvdpa/octeon_ep: fix IRQ-to-ring mapping in interrupt handler
CVE-2026-7240810.0 CRITICALgeneve: gate GRO hint in geneve_gro_complete() on gs->gro_hint
CVE-2026-7240710.0 CRITICALgeneve: validate inner network offset in geneve_gro_complete()
CVE-2026-724939.9 CRITICALnet: serialize netif_running() check in enqueue_to_backlog()
CVE-2026-724369.8 CRITICALnetfilter: ipset: Don't use test_bit() in lockless RCU readers in hash types
CVE-2026-724229.8 CRITICALksmbd: fix use-after-free of conn->preauth_info in concurrent SMB2 NEGOTIATE
CVE-2026-744339.8 CRITICALrxrpc: Fix UAF in rxgk_issue_challenge()
CVE-2026-721399.8 CRITICALtcp: defer md5sig_info kfree past RCU grace period in tcp_connect
CVE-2026-720659.8 CRITICALnet: mana: Validate the packet length reported by the NIC
CVE-2026-720649.8 CRITICALnet: mana: Sync page pool RX frags for CPU
CVE-2026-744349.8 CRITICALrxrpc: Don't move a peeked OOB message onto the pending queue
CVE-2026-722999.8 CRITICALtipc: restrict socket queue dumps in enqueue tracepoints
CVE-2026-724299.8 CRITICALipv6: ioam: fix type confusion of dst_entry
CVE-2026-724519.8 CRITICALxfrm: Fix xfrm state cache insertion race
CVE-2026-720419.8 CRITICALespintcp: use sk_msg_free_partial to fix partial send
CVE-2026-744959.8 CRITICALigbvf: Fix leak in TX DMA error cleanup

Showing top 20 of 846 CVEs. View all on vendor page &rarr; →

IV. Related Vulnerabilities

Same product: Linux
Same vendor: Linux

V. Comments for CVE-2026-74527

No comments yet

Leave a comment