CVE-2026-74527

Summary

In the Linux kernel, the following vulnerability has been resolved:

octeontx2-af: Block VFs from clobbering special CGX PKIND state

PF and VF NIX LFs that share a CGX LMAC reuse the same hardware PKIND programming. When HiGig2 or EDSA parsing is enabled, a VF NIX LF alloc must not reset the LMAC RX PKIND or default TX parse config over the PF setup.

Add cgx_get_pkind() and rvu_cgx_is_pkind_config_permitted() so VFs skip cgx_set_pkind(), rvu_npc_set_pkind(), and NIX_AF_LFX_TX_PARSE_CFG updates when the LMAC is using NPC_RX_HIGIG_PKIND or NPC_RX_EDSA_PKIND.

Affected Software

VendorProductVersion RangeStatus
LinuxLinux94d942c5fb970ac2166216838b278613decfa9a0 < d3c6b0f48f126a36955b3fb4154a59d0b3621d97affected
LinuxLinux94d942c5fb970ac2166216838b278613decfa9a0 < 3bd438a58e910db5dc369aa25dfed1fc95f1b596affected
LinuxLinux4.20affected
LinuxLinux0 < 4.20unaffected
LinuxLinux7.1.8 <= 7.1.*unaffected
LinuxLinux7.2-rc6 <= *unaffected

Weaknesses

References