CVE-2026-46249 (GCVE-0-2026-46249)
Vulnerability from cvelistv5
Published
2026-06-03 15:49
Modified
2026-06-03 15:49
Severity ?
Summary
In the Linux kernel, the following vulnerability has been resolved: octeontx2-af: Fix PF driver crash with kexec kernel booting During a kexec reboot the hardware is not power-cycled, so AF state from the old kernel can persist into the new kernel. When AF and PF drivers are built as modules, the PF driver may probe before AF reinitializes the hardware. The PF driver treats the RVUM block revision as an indication that AF initialization is complete. If this value is left uncleared at shutdown, PF may incorrectly assume AF is ready and access stale hardware state, leading to a crash. Clear the RVUM block revision during AF shutdown to avoid PF mis-detecting AF readiness after kexec.
References
Impacted products
Vendor Product Version
Linux Linux Version: 54494aa5d1e68945dc79feb7c8461cd382e11d8a
Version: 54494aa5d1e68945dc79feb7c8461cd382e11d8a
Version: 54494aa5d1e68945dc79feb7c8461cd382e11d8a
Version: 54494aa5d1e68945dc79feb7c8461cd382e11d8a
Version: 54494aa5d1e68945dc79feb7c8461cd382e11d8a
Version: 54494aa5d1e68945dc79feb7c8461cd382e11d8a
Version: 54494aa5d1e68945dc79feb7c8461cd382e11d8a
Version: 54494aa5d1e68945dc79feb7c8461cd382e11d8a
 Create a notification for this product.
Show details on NVD website

To clipboard 

{
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "drivers/net/ethernet/marvell/octeontx2/af/rvu.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "b7605b9301abc18fbbf2b0e23fdd281fc768955d",
              "status": "affected",
              "version": "54494aa5d1e68945dc79feb7c8461cd382e11d8a",
              "versionType": "git"
            },
            {
              "lessThan": "9769a09afda20a006b528b9e723effcae45965b2",
              "status": "affected",
              "version": "54494aa5d1e68945dc79feb7c8461cd382e11d8a",
              "versionType": "git"
            },
            {
              "lessThan": "57821d1436ba1c6a6973aa32d54166fdec35558c",
              "status": "affected",
              "version": "54494aa5d1e68945dc79feb7c8461cd382e11d8a",
              "versionType": "git"
            },
            {
              "lessThan": "8b5ed7c5417b7013d35b6f2507dab739013ba1a9",
              "status": "affected",
              "version": "54494aa5d1e68945dc79feb7c8461cd382e11d8a",
              "versionType": "git"
            },
            {
              "lessThan": "7d56ba306e93d04696718963fb4cda2883ee7585",
              "status": "affected",
              "version": "54494aa5d1e68945dc79feb7c8461cd382e11d8a",
              "versionType": "git"
            },
            {
              "lessThan": "9c3398e5b3a914b74276d44ab54c49123b89c61a",
              "status": "affected",
              "version": "54494aa5d1e68945dc79feb7c8461cd382e11d8a",
              "versionType": "git"
            },
            {
              "lessThan": "1370736836a18b5e0cd74bcc9cffe11d21f1fe79",
              "status": "affected",
              "version": "54494aa5d1e68945dc79feb7c8461cd382e11d8a",
              "versionType": "git"
            },
            {
              "lessThan": "2d2d574309e3ae84ee794869a5da8b4c38753a94",
              "status": "affected",
              "version": "54494aa5d1e68945dc79feb7c8461cd382e11d8a",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "drivers/net/ethernet/marvell/octeontx2/af/rvu.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "4.20"
            },
            {
              "lessThan": "4.20",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.10.*",
              "status": "unaffected",
              "version": "5.10.252",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.15.*",
              "status": "unaffected",
              "version": "5.15.202",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.1.*",
              "status": "unaffected",
              "version": "6.1.165",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.6.*",
              "status": "unaffected",
              "version": "6.6.128",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.12.*",
              "status": "unaffected",
              "version": "6.12.75",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.18.*",
              "status": "unaffected",
              "version": "6.18.14",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.19.*",
              "status": "unaffected",
              "version": "6.19.4",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "7.0",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.10.252",
                  "versionStartIncluding": "4.20",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.15.202",
                  "versionStartIncluding": "4.20",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.1.165",
                  "versionStartIncluding": "4.20",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.6.128",
                  "versionStartIncluding": "4.20",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.12.75",
                  "versionStartIncluding": "4.20",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.18.14",
                  "versionStartIncluding": "4.20",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.19.4",
                  "versionStartIncluding": "4.20",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "7.0",
                  "versionStartIncluding": "4.20",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nocteontx2-af: Fix PF driver crash with kexec kernel booting\n\nDuring a kexec reboot the hardware is not power-cycled, so AF state from\nthe old kernel can persist into the new kernel. When AF and PF drivers\nare built as modules, the PF driver may probe before AF reinitializes\nthe hardware.\n\nThe PF driver treats the RVUM block revision as an indication that AF\ninitialization is complete. If this value is left uncleared at shutdown,\nPF may incorrectly assume AF is ready and access stale hardware state,\nleading to a crash.\n\nClear the RVUM block revision during AF shutdown to avoid PF\nmis-detecting AF readiness after kexec."
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-06-03T15:49:45.252Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/b7605b9301abc18fbbf2b0e23fdd281fc768955d"
        },
        {
          "url": "https://git.kernel.org/stable/c/9769a09afda20a006b528b9e723effcae45965b2"
        },
        {
          "url": "https://git.kernel.org/stable/c/57821d1436ba1c6a6973aa32d54166fdec35558c"
        },
        {
          "url": "https://git.kernel.org/stable/c/8b5ed7c5417b7013d35b6f2507dab739013ba1a9"
        },
        {
          "url": "https://git.kernel.org/stable/c/7d56ba306e93d04696718963fb4cda2883ee7585"
        },
        {
          "url": "https://git.kernel.org/stable/c/9c3398e5b3a914b74276d44ab54c49123b89c61a"
        },
        {
          "url": "https://git.kernel.org/stable/c/1370736836a18b5e0cd74bcc9cffe11d21f1fe79"
        },
        {
          "url": "https://git.kernel.org/stable/c/2d2d574309e3ae84ee794869a5da8b4c38753a94"
        }
      ],
      "title": "octeontx2-af: Fix PF driver crash with kexec kernel booting",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2026-46249",
    "datePublished": "2026-06-03T15:49:45.252Z",
    "dateReserved": "2026-05-13T15:03:33.107Z",
    "dateUpdated": "2026-06-03T15:49:45.252Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
  • Confirmed: The vulnerability is confirmed from an analyst perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
  • Patched: This vulnerability was successfully patched by the user reporting the sighting.
  • Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
  • Not confirmed: The user expresses doubt about the veracity of the vulnerability.
  • Not patched: This vulnerability was not successfully patched by the user reporting the sighting.