All vulnerabilities
CVE-2026-93279

Linux: staging: octeon: add missing tasklet_kill in cvm_oct_tx_shutdown

Linux LinuxOperating systems
Open in ThreatlineRecord JSON
CVSS
NoneNot scored
ExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)0.20%Chance of exploitation activity in the next 30 days, higher than 8% of CVEs. Scored 23 Oct 2026FIRST EPSS
Fixed in32efcb6d5f4e3f030e7b0a3ba5c6c0684dd07486Also 03d12490afd1198310ad0aba42462329832eb739, 2c0c9956596e48654bb4855e2a0742748a0826a7 and 1 moreCVE List
Published24 Sep 2026Updated 19 Oct 2026CVE List

What fixes it

  • 32efcb6d5f4e3f030e7b0a3ba5c6c0684dd07486LinuxCVE List
  • 03d12490afd1198310ad0aba42462329832eb739LinuxCVE List
  • 2c0c9956596e48654bb4855e2a0742748a0826a7LinuxCVE List
  • 41a79bd9e5a74f8f483b3b206d10567912874fb4LinuxCVE List

A fixed version on one release line is not the upgrade target for every line. Check your exact version and any vendor backports.

Description

In the Linux kernel, the following vulnerability has been resolved:

staging: octeon: add missing tasklet_kill in cvm_oct_tx_shutdown

The TX cleanup tasklet can be scheduled by the watchdog IRQ handler to execute cvm_oct_tx_do_cleanup. There can be a pending tasklet in the queue which might run after the cvm_oct_remove() frees net_device structures, causing a use-after-free in cvm_oct_tx_do_cleanup() as it iterates cvm_oct_device[] which is an array of netdevice pointers. Add tasklet_kill() after free_irq() to ensure the tasklet is no longer scheduled or running before teardown proceeds.

Text from CVE List

Affected versions 18

  • Linuxaffected: 4898c560103fb8075c10a8e9d70e0ca26873075e before 32efcb6d5f4e3f030e7b0a3ba5c6c0684dd07486CVE List
  • Linuxaffected: 4898c560103fb8075c10a8e9d70e0ca26873075e before d15226338dfaa84ffff142d32723cdf74d0c47c4CVE List
  • Linuxaffected: 4898c560103fb8075c10a8e9d70e0ca26873075e before a77efd85e0d48c877f66d2bc3ab89cc1b8dacd19CVE List
  • Linuxaffected: 4898c560103fb8075c10a8e9d70e0ca26873075e before b6365e4186322858a82c8713b1d0bd209c8e765aCVE List
  • Linuxaffected: 4898c560103fb8075c10a8e9d70e0ca26873075e before 03d12490afd1198310ad0aba42462329832eb739CVE List
  • Linuxaffected: 4898c560103fb8075c10a8e9d70e0ca26873075e before 2c0c9956596e48654bb4855e2a0742748a0826a7CVE List
  • Linuxaffected: 4898c560103fb8075c10a8e9d70e0ca26873075e before 41a79bd9e5a74f8f483b3b206d10567912874fb4CVE List
  • Linuxaffected: 4898c560103fb8075c10a8e9d70e0ca26873075e before b9af44b0d20b2247c4eb0ea5cfca907d643eea50CVE List
  • Linuxaffected: 2.6.34CVE List
  • Linuxunaffected: all versions before 2.6.34CVE List
  • Linuxunaffected: 5.10.270 through 5.10.*CVE List
  • Linuxunaffected: 5.15.221 through 5.15.*CVE List
  • Linuxunaffected: 6.1.188 through 6.1.*CVE List
  • Linuxunaffected: 6.6.157 through 6.6.*CVE List
  • Linuxunaffected: 6.12.110 through 6.12.*CVE List
  • Linuxunaffected: 6.18.52 through 6.18.*CVE List
  • Linuxunaffected: 7.2.6 through 7.2.*CVE List
  • Linuxunaffected: 7.3CVE List

References 8