The Linux kernel octeontx2 driver implements the NIX network controller for SiFive OcteonTX 2 processors. A logic error allows an administrator to set the maximum number of logical functions (LFs) via the devlink interface before any LFs have been assigned to a physical or virtual function. The check that confirms whether any LFs are assigned is incorrect, so the kernel may accept a maximum LF value that does not correspond to the actual set of LFs. This can lead to an inconsistent driver configuration and degraded networking performance or service disruption, but does not trigger a crash or allow arbitrary code execution.

This applies to any Linux kernel that includes the octeontx2 driver. The specific kernel versions affected are not enumerated in the available data, so any kernel build that ships the driver prior to the patch is potentially vulnerable. Systems that use the octeontx2 NIX network controller in either physical or virtual function mode are at risk.

The CVSS score of 7.8 classifies this as a high‑severity vulnerability, yet the EPSS score of <1% suggests that exploitation in the wild is unlikely. The devlink commands require privileged (root or system administrator) access, so only users with such rights can trigger the flaw; this limits the attack surface to local privileged users. Based on the command interface, it is inferred that only privileged users can run devlink commands. The vulnerability is not listed in the CISA KEV catalog, and no publicly available exploits are known. Because the flaw merely causes driver state inconsistency, the impact is limited to potential service degradation rather than full compromise.