CVE-2026-90080
Received
Received - Intake
BaseFortify
Vulnerability report for CVE-2026-90080, including description, CVSS score, EPSS score, affected products, exploitability, helpful resources, and attack-flow context.
Publication date: 2026-09-17
Last updated on: 2026-09-17
Assigner: kernel.org
Description
Description
In the Linux kernel, the following vulnerability has been resolved:
octeontx2-pf: fix NULL deref of af_xdp_zc_qidx on rep setup
af_xdp_zc_qidx tracks receive queues using AF_XDP zero-copy and is
allocated during PF/VF probe. Representors and other non-AF_XDP paths
leave the pointer NULL, but several call sites used test_bit() on it
unconditionally.
Switching to devlink eswitch mode creates representors and runs
otx2_init_hw_resources(), which reaches otx2_pool_aq_init() and oopses
when dereferencing the NULL bitmap. Add NULL checks before every
af_xdp_zc_qidx test_bit() use in the RSS, ethtool, XSK, and pool init
paths.
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| Linux | Linux | efabce29015189cb5cd8066cf29eb1d754de6c3c |
| Linux | Linux | efabce29015189cb5cd8066cf29eb1d754de6c3c |
| Linux | Linux | efabce29015189cb5cd8066cf29eb1d754de6c3c |
| Linux | Linux | 9bd7273cf1f9c5761d696cca821d25602e8f7009 |
| Linux | Linux | 6.14.9 |
| Linux | Linux | 6.15 |
Helpful Resources
Exploitability
CWE
KEV
| CWE ID | Description |
|---|---|
| CWE-UNKNOWN |
