All vulnerabilities
CVE-2026-93278

Linux: staging: octeon: add missing napi_disable in cvm_oct_rx_shutdown

Linux LinuxOperating systems
Open in ThreatlineRecord JSON
CVSS
NoneNot scored
ExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)0.19%Chance of exploitation activity in the next 30 days, higher than 8% of CVEs. Scored 23 Oct 2026FIRST EPSS
Fixed in158389d7af04bbf0664d91c2ce31fcc9eeace1ebAlso 98f9036b2254c928cb44da0c77dba38f66f7d8f1, 89f9f433271fad9351de6a3c713b45b2cfb23e4aCVE List
Published24 Sep 2026Updated 19 Oct 2026CVE List

What fixes it

  • 158389d7af04bbf0664d91c2ce31fcc9eeace1ebLinuxCVE List
  • 98f9036b2254c928cb44da0c77dba38f66f7d8f1LinuxCVE List
  • 89f9f433271fad9351de6a3c713b45b2cfb23e4aLinuxCVE List

A fixed version on one release line is not the upgrade target for every line. Check your exact version and any vendor backports.

Description

In the Linux kernel, the following vulnerability has been resolved:

staging: octeon: add missing napi_disable in cvm_oct_rx_shutdown

cvm_oct_rx_shutdown calls free_irq and netif_napi_del without disabling the napi instance first. As the free_irq only waits for completion of hard interrupt handlers, the napi poll function could still be active. If cvm_oct_remove proceeds to free the plat structure (which holds the NAPI instances), the active poll function will access freed memory, resulting in a use-after-free crash.

Text from CVE List

Affected versions 16

  • Linuxaffected: 3368c784bcf77124aaf39372e627016c36bd4472 before 158389d7af04bbf0664d91c2ce31fcc9eeace1ebCVE List
  • Linuxaffected: 3368c784bcf77124aaf39372e627016c36bd4472 before c124049c3a7006fd6caf629139a5722610bbffb4CVE List
  • Linuxaffected: 3368c784bcf77124aaf39372e627016c36bd4472 before 98f9036b2254c928cb44da0c77dba38f66f7d8f1CVE List
  • Linuxaffected: 3368c784bcf77124aaf39372e627016c36bd4472 before b38fbd68cc36b4f478a1e3cfc169b8616ae1337dCVE List
  • Linuxaffected: 3368c784bcf77124aaf39372e627016c36bd4472 before 89f9f433271fad9351de6a3c713b45b2cfb23e4aCVE List
  • Linuxaffected: 3368c784bcf77124aaf39372e627016c36bd4472 before b2243ffaac14cc3639b5b32a371aac37f96ee554CVE List
  • Linuxaffected: 3368c784bcf77124aaf39372e627016c36bd4472 before c0a9a8586a63fda49e61a6b83360feac2a60d898CVE List
  • Linuxaffected: 2.6.34CVE List
  • Linuxunaffected: all versions before 2.6.34CVE List
  • Linuxunaffected: 5.15.221 through 5.15.*CVE List
  • Linuxunaffected: 6.1.188 through 6.1.*CVE List
  • Linuxunaffected: 6.6.157 through 6.6.*CVE List
  • Linuxunaffected: 6.12.110 through 6.12.*CVE List
  • Linuxunaffected: 6.18.52 through 6.18.*CVE List
  • Linuxunaffected: 7.2.6 through 7.2.*CVE List
  • Linuxunaffected: 7.3CVE List

References 7