CVE-2026-93246
Received Received - Intake

Out-of-Bounds Read in Linux Kernel Octeontx2-AF Driver

Publication date: 2026-09-24

Last updated on: 2026-09-24

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: octeontx2-af: fix out-of-bounds read setting MSI-X irq affinity rvu_register_interrupts() walks every MSI-X vector and uses strstr() to match "Mbox" or "FLR" in irq_name before pinning those interrupts to CPU 0. irq_name is a per-vector NAME_SIZE buffer, but not every slot is populated before this loop runs. strstr() keeps scanning until it finds a NUL terminator, so an uninitialized slot can trigger a KASAN slab-out-of-bounds read at boot when debug options are enabled. Use strnstr() with NAME_SIZE to bound the search within each vector's name buffer.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-24
Last Modified
2026-09-24
Generated
2026-09-25
AI Q&A
2026-09-24
EPSS Evaluated
N/A
NVD
CVE-2026-93246
EUVD
EUVD-2026-86256

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
linux linux_kernel *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This is a Linux kernel vulnerability where an out-of-bounds read occurs during MSI-X interrupt affinity setup. The function rvu_register_interrupts() scans MSI-X vector names for 'Mbox' or 'FLR' using strstr(), but fails to check buffer bounds. Uninitialized name slots can trigger a slab-out-of-bounds read when debug options are enabled.

Detection Guidance

This vulnerability is specific to the Linux kernel's octeontx2-af driver and may trigger a KASAN slab-out-of-bounds read during boot when debug options are enabled. Detection typically requires kernel debugging tools like KASAN or checking kernel logs for slab-out-of-bounds errors during system startup.

Impact Analysis

On systems with debug options enabled, this could cause kernel crashes or instability during boot. It may expose memory contents or lead to denial-of-service if the out-of-bounds read corrupts critical data structures.

Compliance Impact

This vulnerability does not directly affect compliance with GDPR, HIPAA, or similar standards as it is a low-level kernel memory safety issue without documented data exposure or privacy implications.

Mitigation Strategies

Apply the kernel patch that replaces strstr() with strnstr() in the rvu_register_interrupts() function. Update to a fixed Linux kernel version where this issue is resolved. Monitor kernel logs for related errors if debug options are enabled.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-93246. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart