The vulnerability resides in the Linux kernel’s octeontx2‑af NPC driver; it is triggered by an out‑of‑bounds write when allocating a counter for reserved MCAM entries. The KASAN trace shows a slab‑out‑of‑bounds error that can corrupt kernel memory, potentially leading to a crash or arbitrary code execution by a local attacker with kernel privileges. The bug is specifically tied to the incorrect handling of the entry2cntr_map size during the second pass entry installation.

Linux operating systems that include the octeontx2‑af NPC driver in their kernel build, such as those running on Marvell CN106XX hardware, are affected. Any kernel compiled with the vulnerable driver code before the patch that correctly allocates entry2cntr_map suffers from this flaw.

No CVSS or EPSS score is available, but the memory corruption nature of the bug indicates moderate to high risk. The vulnerability is not listed in the CISA KEV catalog, suggesting no documented large‑scale exploitation yet. However, an attacker who can gain kernel access could exploit the out‑of‑bounds write to compromise system stability or elevate privileges. The likely attack vector is local, requiring control over the systems' hardware or firmware that triggers MCAM entry installation.