The octeontx2‑pf driver contains a NULL pointer dereference that occurs when CONFIG_DCB is enabled and the queue_to_pfc_map structure is not initialized, such as on some virtual functions (VFs). The bug leads to an invalid memory access that can crash the kernel, resulting in a denial of service and potentially allowing an attacker who can trigger the crash to elevate privileges through a kernel panic. This weakness is classified as a null pointer dereference (CWE‑476).

All Linux kernel builds that compile the octeontx2‑pf driver with CONFIG_DCB enabled are affected. Kernel versions prior to the patch introduced in commits 05699456 and 59fbbde are vulnerable. Administrators should verify that their kernel version and configuration include the patch or that DCB is not enabled for uninitialized contexts.

The CVSS score of 4.4 indicates a moderate impact. The EPSS score is below 1 %, showing that exploitation probability is very low, and the vulnerability is not listed in CISA’s KEV catalog. The vulnerability requires the ability to use or influence the octeontx2‑pf driver; a local or privilege‑escalation vector that allows the attacker to trigger the fault is needed. Given the potential for a kernel panic, the risk warrants prompt mitigation, but the likelihood of exploitation remains uncertain.