SEPTEMBER 19, 2026
Live Feed
Back to database
Case File

CVE-2026-74527

HIGH · CVSS 8.8 EPSS 0.12%

Source: NVD + CISA KEV + EPSS · Published 2026-08-15 · Last synced 2026-09-14

CyberRota Analysis

AI-Generated

The vulnerability affects the Linux kernel's handling of Virtual Functions (VFs) and Physical Functions (PFs) that share a Common Gateway (CGX) LMAC, allowing VFs to inadvertently overwrite critical PKIND state configurations. This could lead to improper packet parsing and potential data corruption or denial of service in network communications. Organizations utilizing Linux systems with shared networking resources should prioritize addressing this issue to maintain network integrity and performance.

CVE
CVE-2026-74527
Severity
HIGH
CVSS
8.8
EPSS
0.12%
Linux

Original NVD Description

In the Linux kernel, the following vulnerability has been resolved: octeontx2-af: Block VFs from clobbering special CGX PKIND state PF and VF NIX LFs that share a CGX LMAC reuse the same hardware PKIND programming. When HiGig2 or EDSA parsing is enabled, a VF NIX LF alloc must not reset the LMAC RX PKIND or default TX parse config over the PF setup. Add cgx_get_pkind() and rvu_cgx_is_pkind_config_permitted() so VFs skip cgx_set_pkind(), rvu_npc_set_pkind(), and NIX_AF_LFX_TX_PARSE_CFG updates when the LMAC is using NPC_RX_HIGIG_PKIND or NPC_RX_EDSA_PKIND.