CVE-2026-74309
Received Received - Intake

VDPA/Octeon EP IRQ-to-Ring Mapping Vulnerability

Publication date: 2026-08-15

Last updated on: 2026-08-15

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: vdpa/octeon_ep: fix IRQ-to-ring mapping in interrupt handler Look up the IRQ index in oct_hw->irqs instead of assuming irq - irqs[0]. This supports non-contiguous IRQ numbers and avoids incorrect ring indexing when irqs[0] is not the base.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-15
Last Modified
2026-08-15
Generated
2026-08-15
AI Q&A
2026-08-15
EPSS Evaluated
N/A
NVD
CVE-2026-74309
EUVD
EUVD-2026-59456

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
linux_kernel linux_kernel *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability in the Linux kernel involves incorrect IRQ-to-ring mapping in the interrupt handler for the vdpa/octeon_ep driver. The issue occurs because the code assumes the IRQ index is always irq - irqs[0], which can fail when IRQ numbers are non-contiguous. This leads to incorrect ring indexing and potential system instability.

Impact Analysis

This vulnerability may cause incorrect interrupt handling, leading to system crashes, data corruption, or denial of service. Systems using the affected vdpa/octeon_ep driver with non-contiguous IRQ numbers are most at risk.

Mitigation Strategies

Update the Linux kernel to a patched version that includes the fix for CVE-2026-74309. This resolves the vdpa/octeon_ep IRQ-to-ring mapping issue.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-74309. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart