CVE-2026-74527 PUBLISHED

octeontx2-af: Block VFs from clobbering special CGX PKIND state

Assigner: Linux
Reserved: 15.08.2026 Published: 15.08.2026 Updated: 15.08.2026

In the Linux kernel, the following vulnerability has been resolved:

octeontx2-af: Block VFs from clobbering special CGX PKIND state

PF and VF NIX LFs that share a CGX LMAC reuse the same hardware PKIND programming. When HiGig2 or EDSA parsing is enabled, a VF NIX LF alloc must not reset the LMAC RX PKIND or default TX parse config over the PF setup.

Add cgx_get_pkind() and rvu_cgx_is_pkind_config_permitted() so VFs skip cgx_set_pkind(), rvu_npc_set_pkind(), and NIX_AF_LFX_TX_PARSE_CFG updates when the LMAC is using NPC_RX_HIGIG_PKIND or NPC_RX_EDSA_PKIND.

Product Status

Vendor Linux
Product Linux
Versions Default: unaffected
  • affected from 94d942c5fb970ac2166216838b278613decfa9a0 to d3c6b0f48f126a36955b3fb4154a59d0b3621d97 (excl.)
  • affected from 94d942c5fb970ac2166216838b278613decfa9a0 to 3bd438a58e910db5dc369aa25dfed1fc95f1b596 (excl.)
Vendor Linux
Product Linux
Versions Default: affected
  • Version 4.20 is affected
  • unaffected from 0 to 4.20 (excl.)
  • unaffected from 7.1.8 to 7.1.* (incl.)
  • unaffected from 7.2-rc6 to * (incl.)

References