CVE-2026-74527

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2026-74527
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-74527.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-74527
Downstream
BELL (1)
DEBIAN (1)
openSUSE (1)
SUSE (10)
UBUNTU (1)
Related
openSUSE (1)
SUSE (10)
Published
2026-08-15T12:27:43Z
Modified
2026-11-01T02:30:59Z
Severity
  • 8.8 (High) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H CVSS Calculator
Summary
octeontx2-af: Block VFs from clobbering special CGX PKIND state
Details

In the Linux kernel, the following vulnerability has been resolved:

octeontx2-af: Block VFs from clobbering special CGX PKIND state

PF and VF NIX LFs that share a CGX LMAC reuse the same hardware PKIND programming. When HiGig2 or EDSA parsing is enabled, a VF NIX LF alloc must not reset the LMAC RX PKIND or default TX parse config over the PF setup.

Add cgx_get_pkind() and rvu_cgx_is_pkind_config_permitted() so VFs skip cgx_set_pkind(), rvu_npc_set_pkind(), and NIX_AF_LFX_TX_PARSE_CFG updates when the LMAC is using NPC_RX_HIGIG_PKIND or NPC_RX_EDSA_PKIND.

Database specific 
{
    "cna_assigner":  "Linux",
    "osv_generated_from":  "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/74xxx/CVE-2026-74527.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
94d942c5fb970ac2166216838b278613decfa9a0
Fixed
f24f7ce6fb2d1ae080a05371afddba30a3e0b919
Fixed
1106b26e86ac1e7e4d1f634bcd532c5d44e60620
Fixed
7e888d7dd11519330ba6c6a28391d55891463a6a
Fixed
a76243488740a07c81c9adf431685bb7f7c31d8c
Fixed
d3c6b0f48f126a36955b3fb4154a59d0b3621d97
Fixed
3bd438a58e910db5dc369aa25dfed1fc95f1b596

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-74527.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
4.20.0
Fixed
6.1.191
Type
ECOSYSTEM
Events
Introduced
6.2.0
Fixed
6.6.160
Type
ECOSYSTEM
Events
Introduced
6.7.0
Fixed
6.12.114
Type
ECOSYSTEM
Events
Introduced
6.13.0
Fixed
6.18.57
Type
ECOSYSTEM
Events
Introduced
6.19.0
Fixed
7.1.8

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-74527.json"