CVE-2026-93279
Received Received - Intake

Use-After-Free in Linux Kernel Octeon Driver

Publication date: 2026-09-24

Last updated on: 2026-09-24

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: staging: octeon: add missing tasklet_kill in cvm_oct_tx_shutdown The TX cleanup tasklet can be scheduled by the watchdog IRQ handler to execute cvm_oct_tx_do_cleanup. There can be a pending tasklet in the queue which might run after the cvm_oct_remove() frees net_device structures, causing a use-after-free in cvm_oct_tx_do_cleanup() as it iterates cvm_oct_device[] which is an array of netdevice pointers. Add tasklet_kill() after free_irq() to ensure the tasklet is no longer scheduled or running before teardown proceeds.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-24
Last Modified
2026-09-24
Generated
2026-09-24
AI Q&A
2026-09-24
EPSS Evaluated
N/A
NVD
CVE-2026-93279
EUVD
EUVD-2026-86151

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
linux linux_kernel *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This is a use-after-free vulnerability in the Linux kernel's staging octeon driver. A tasklet scheduled by a watchdog IRQ handler can run after the network device structures are freed, causing the tasklet to access invalid memory when cleaning up TX resources.

Detection Guidance

This vulnerability is specific to the Linux kernel's staging octeon driver and involves a use-after-free condition in the TX cleanup tasklet. Detection requires checking kernel logs for crashes or warnings related to cvm_oct_tx_do_cleanup or cvm_oct_remove. Commands like dmesg | grep -i octeon or journalctl -k | grep -i octeon may help identify issues.

Impact Analysis

This could lead to system crashes, kernel memory corruption, or potential privilege escalation if exploited. Systems using affected Linux kernel versions with the octeon driver enabled may experience instability or security issues.

Mitigation Strategies

Apply the latest kernel update that includes the fix for this vulnerability. If immediate patching is not possible, disable the octeon driver module if not in use. Monitor system logs for signs of exploitation or crashes.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-93279. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart