Linux Kernel up to 7.1.7/7.2-rc5 octeontx2-af cgx_get_pkind/rvu_cgx_is_pkind_config_permitted state issue

Summaryinfo

A vulnerability classified as very critical was found in Linux Kernel up to 7.1.7/7.2-rc5. This affects the function cgx_get_pkind/rvu_cgx_is_pkind_config_permitted of the component octeontx2-af. The manipulation results in state issue. This vulnerability is known as CVE-2026-74527. It is possible to launch the attack remotely. No exploit is available.

Detailsinfo

A vulnerability, which was classified as very critical, was found in Linux Kernel up to 7.1.7/7.2-rc5. Affected is the function cgx_get_pkind/rvu_cgx_is_pkind_config_permitted of the component octeontx2-af. The manipulation with an unknown input leads to a state issue vulnerability. CWE is classifying the issue as CWE-371. This is going to have an impact on confidentiality, integrity, and availability. CVE summarizes:

In the Linux kernel, the following vulnerability has been resolved: octeontx2-af: Block VFs from clobbering special CGX PKIND state PF and VF NIX LFs that share a CGX LMAC reuse the same hardware PKIND programming. When HiGig2 or EDSA parsing is enabled, a VF NIX LF alloc must not reset the LMAC RX PKIND or default TX parse config over the PF setup. Add cgx_get_pkind() and rvu_cgx_is_pkind_config_permitted() so VFs skip cgx_set_pkind(), rvu_npc_set_pkind(), and NIX_AF_LFX_TX_PARSE_CFG updates when the LMAC is using NPC_RX_HIGIG_PKIND or NPC_RX_EDSA_PKIND.

The advisory is available at git.kernel.org. This vulnerability is traded as CVE-2026-74527 since 08/15/2026. The exploitability is told to be easy. It is possible to launch the attack remotely. The exploitation requires an enhanced level of successful authentication. Technical details are known, but there is no available exploit. The structure of the vulnerability defines a possible price range of USD $0-$5k at the moment (estimation calculated on 08/15/2026).

Upgrading to version 7.1.8 or 7.2-rc6 eliminates this vulnerability. Applying the patch d3c6b0f48f126a36955b3fb4154a59d0b3621d97/3bd438a58e910db5dc369aa25dfed1fc95f1b596 is able to eliminate this problem.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

Productinfo

Type

• Operating System

Vendor

• Linux

Name

• Kernel

Version

• 7.1.0
• 7.1.1
• 7.1.2
• 7.1.3
• 7.1.4
• 7.1.5
• 7.1.6
• 7.1.7
• 7.2-rc1
• 7.2-rc2
• 7.2-rc3
• 7.2-rc4
• 7.2-rc5

License

• open-source

Website

• Vendor: https://www.kernel.org/

CPE 2.3info

• 🔒
• 🔒
• 🔒

CPE 2.2info

• 🔒
• 🔒
• 🔒

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

If you want to get best quality of vulnerability data, you may have to visit VulDB.

Discussion