CVE-2026-80629
Received Received - Intake

Buffer Overflow in Linux Kernel OcteonTX2 AF NPC Driver

Publication date: 2026-08-28

Last updated on: 2026-08-28

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: octeontx2-af: npc: Fix size of entry2cntr_map KASAN prints below splat. This is caused by allocating counter for reserved mcam entry for cpt 2nd pass entry. But mcam->entry2cntr_map is not allocated for reserved entries. BUG: KASAN: slab-out-of-bounds in npc_map_mcam_entry_and_cntr+0xb0/0x1a0 Write of size 2 at addr ffff0001033e7ffe by task kworker/0:1/14 CPU: 0 PID: 14 Comm: kworker/0:1 Not tainted 6.1.67 #1 Hardware name: Marvell CN106XX board (DT) Workqueue: events work_for_cpu_fn Call trace: dump_backtrace.part.0+0xe4/0xf0 show_stack+0x18/0x30 dump_stack_lvl+0x88/0xb4 print_report+0x154/0x458 kasan_report+0xb8/0x194 __asan_store2+0x7c/0xa0 npc_map_mcam_entry_and_cntr+0xb0/0x1a0 rvu_mbox_handler_npc_mcam_write_entry+0x268/0x280 npc_install_flow+0x840/0xfe0 rvu_npc_install_cpt_pass2_entry+0x138/0x190 rvu_nix_init+0x148c/0x2880 rvu_probe+0x1800/0x30b0 local_pci_probe+0x78/0xe0 work_for_cpu_fn+0x30/0x50 process_one_work+0x4cc/0x97c worker_thread+0x360/0x630 kthread+0x1a0/0x1b0 ret_from_fork+0x10/0x20

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-28
Last Modified
2026-08-28
Generated
2026-09-17
AI Q&A
2026-08-28
EPSS Evaluated
2026-09-15
NVD
CVE-2026-80629
EUVD
EUVD-2026-67505

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
marvell linux_kernel 6.1.67

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability in the Linux kernel involves a flaw in the octeontx2-af driver's network processing unit (NPU) configuration. It occurs when the system incorrectly allocates a counter for a reserved MCAM entry used for CPT second-pass processing. The issue leads to a KASAN error indicating a slab-out-of-bounds write, caused by accessing memory outside allocated bounds in the mcam->entry2cntr_map structure.

Detection Guidance

This vulnerability is specific to the Linux kernel's octeontx2-af driver and may not have direct detection commands. Monitor kernel logs for KASAN slab-out-of-bounds errors related to npc_map_mcam_entry_and_cntr or rvu_mbox_handler_npc_mcam_write_entry. Check for crashes or warnings in the octeontx2-af module.

Impact Analysis

This vulnerability could cause system instability or crashes due to memory corruption. It may lead to denial-of-service conditions, as the KASAN error suggests improper memory handling. Systems using affected Marvell CN106XX hardware with the vulnerable Linux kernel version may experience unexpected failures during network processing tasks.

Compliance Impact

This vulnerability does not directly affect compliance with GDPR, HIPAA, or other standards as it is a low-level kernel memory corruption issue in the Linux octeontx2-af driver. It causes a slab-out-of-bounds write due to improper handling of reserved MCAM entries, which could lead to system instability or crashes but does not inherently violate data protection or privacy regulations.

Mitigation Strategies

Update the Linux kernel to a patched version where this issue is resolved. If using a Marvell octeontx2 platform, apply the vendor-specific fix for the octeontx2-af driver. Restart affected systems after applying updates.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-80629. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart