Description
In the Linux kernel, the following vulnerability has been resolved:

octeontx2-af: Block VFs from clobbering special CGX PKIND state

PF and VF NIX LFs that share a CGX LMAC reuse the same hardware PKIND
programming. When HiGig2 or EDSA parsing is enabled, a VF NIX LF alloc must
not reset the LMAC RX PKIND or default TX parse config over the PF setup.

Add cgx_get_pkind() and rvu_cgx_is_pkind_config_permitted() so VFs skip
cgx_set_pkind(), rvu_npc_set_pkind(), and NIX_AF_LFX_TX_PARSE_CFG updates
when the LMAC is using NPC_RX_HIGIG_PKIND or NPC_RX_EDSA_PKIND.
Published: 2026-08-15
Score: 8.8 High
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Impact

Based on the description, it is inferred that a Virtual Function can reset the packet‑parsing configuration used by the Physical Function on octeontx2 hardware when HiGig2 or EDSA parsing is active. This reset can overwrite the Physical Function’s PKIND state, leading to incorrect packet header interpretation or disabling parsing altogether, effectively causing a denial of service. The weakness is an improper privilege enforcement flaw, allowing a lower‑privileged component to modify a higher‑level resource without adequate checks.

Affected Systems

The vulnerability exists in all Linux kernel releases that include the octeontx2-af driver. Any host that runs a kernel with this component and utilizes octeontx2 virtual functions can potentially be affected. The issue is vendor‑agnostic for Linux, affecting generic distributions where the driver code is present; specific kernel version numbers are not provided.

Risk and Exploitability

The CVSS score of 8.8 indicates a high severity kernel‑level impact. EPSS score of < 1% indicates a low probability of exploitation, and the flaw is not listed in CISA KEV. The flaw is exploitable when HiGig2 or EDSA parsing is enabled on virtual functions, requiring ability to create or modify VF configurations. Based on the description, it is inferred that the attack vector is local or privileged. Successful exploitation could corrupt PF state, potentially disabling the host’s network stack without needing external network access.

Generated by OpenCVE AI on August 21, 2026 at 19:32 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Upgrade the Linux kernel to a version that includes the cgx_get_pkind() and rvu_cgx_is_pkind_config_permitted() changes that prevent VFs from resetting PF PKIND state.
  • If the patch is not yet available, isolate the octeontx2 NIC and disable HiGig2 or EDSA parsing on all Virtual Functions until the kernel fix is applied.
  • After applying the patch or disabling the parsing feature, reboot the system to ensure the new configuration takes effect and verify that PF and VF operations perform correctly.

Generated by OpenCVE AI on August 21, 2026 at 19:32 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Fri, 21 Aug 2026 00:15:00 +0000

Type Values Removed Values Added
Weaknesses CWE-1220
References
Metrics threat_severity

None

threat_severity

Moderate


Mon, 17 Aug 2026 12:30:00 +0000

Type Values Removed Values Added
Weaknesses CWE-284

Mon, 17 Aug 2026 06:00:00 +0000

Type Values Removed Values Added
Metrics cvssV3_1

{'score': 8.8, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H'}


Sat, 15 Aug 2026 12:45:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: octeontx2-af: Block VFs from clobbering special CGX PKIND state PF and VF NIX LFs that share a CGX LMAC reuse the same hardware PKIND programming. When HiGig2 or EDSA parsing is enabled, a VF NIX LF alloc must not reset the LMAC RX PKIND or default TX parse config over the PF setup. Add cgx_get_pkind() and rvu_cgx_is_pkind_config_permitted() so VFs skip cgx_set_pkind(), rvu_npc_set_pkind(), and NIX_AF_LFX_TX_PARSE_CFG updates when the LMAC is using NPC_RX_HIGIG_PKIND or NPC_RX_EDSA_PKIND.
Title octeontx2-af: Block VFs from clobbering special CGX PKIND state
First Time appeared Linux
Linux linux Kernel
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel
References

Subscriptions

Linux Linux Kernel
cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published:

Updated: 2026-08-17T05:48:16.718Z

Reserved: 2026-08-15T05:44:03.912Z

Link: CVE-2026-74527

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Received

Published: 2026-08-15T13:17:57.983

Modified: 2026-08-17T06:19:49.550

Link: CVE-2026-74527

cve-icon Redhat

Severity : Moderate

Publid Date: 2026-08-15T00:00:00Z

Links: CVE-2026-74527 - Bugzilla

cve-icon OpenCVE Enrichment

Updated: 2026-08-21T19:45:03Z

Weaknesses
  • CWE-1220

    Insufficient Granularity of Access Control

  • CWE-284

    Improper Access Control