CVE-2026-46249
Received Received - Intake
OcteonTX2 AF Driver Kernel Crash on Kexec Reboot

Publication date: 2026-06-03

Last updated on: 2026-06-03

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: octeontx2-af: Fix PF driver crash with kexec kernel booting During a kexec reboot the hardware is not power-cycled, so AF state from the old kernel can persist into the new kernel. When AF and PF drivers are built as modules, the PF driver may probe before AF reinitializes the hardware. The PF driver treats the RVUM block revision as an indication that AF initialization is complete. If this value is left uncleared at shutdown, PF may incorrectly assume AF is ready and access stale hardware state, leading to a crash. Clear the RVUM block revision during AF shutdown to avoid PF mis-detecting AF readiness after kexec.
CVSS Scores
EPSS Scores
Probability:
Percentile:
Meta Information
Published
2026-06-03
Last Modified
2026-06-03
Generated
2026-06-04
AI Q&A
2026-06-03
EPSS Evaluated
N/A
NVD
EUVD
Affected Vendors & Products
Showing 2 associated CPEs
Vendor Product Version / Range
linux kernel *
linux_kernel linux_kernel *
Helpful Resources
Exploitability
CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?

This vulnerability occurs in the Linux kernel related to the octeontx2-af and PF drivers during a kexec reboot. Because the hardware is not power-cycled during kexec, the AF driver's state from the old kernel can persist into the new kernel.

When the AF and PF drivers are built as modules, the PF driver may start probing before the AF driver has reinitialized the hardware. The PF driver uses the RVUM block revision as an indicator that the AF driver has completed initialization.

If the RVUM block revision value is not cleared during shutdown, the PF driver may mistakenly assume the AF driver is ready and access stale hardware state, which can cause the PF driver to crash.

The fix involves clearing the RVUM block revision during AF shutdown to prevent the PF driver from misdetecting AF readiness after a kexec reboot.


How can this vulnerability impact me? :

This vulnerability can cause the PF driver to crash during a kexec reboot because it may access stale hardware state if it incorrectly assumes the AF driver has completed initialization.

Such crashes can lead to system instability or downtime during kernel reboots using kexec, potentially affecting system availability.


What immediate steps should I take to mitigate this vulnerability?

To mitigate this vulnerability, ensure that the Linux kernel version you are using includes the fix for the octeontx2-af PF driver crash during kexec kernel booting.

Specifically, the fix involves clearing the RVUM block revision during AF shutdown to prevent the PF driver from mis-detecting AF readiness and accessing stale hardware state.

Therefore, updating your kernel to a version that contains this patch is the immediate step to prevent crashes related to this issue.


Ask Our AI Assistant
Need more information? Ask your question to get an AI reply (Powered by our expertise)
0/70
EPSS Chart