CVE-2026-74527

Source
https://cve.org/CVERecord?id=CVE-2026-74527
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-74527.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-74527
Downstream
Published
2026-08-15T12:27:43Z
Modified
2026-08-18T03:56:32Z
Severity
  • 8.8 (High) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H CVSS Calculator
Summary
octeontx2-af: Block VFs from clobbering special CGX PKIND state
Details

In the Linux kernel, the following vulnerability has been resolved:

octeontx2-af: Block VFs from clobbering special CGX PKIND state

PF and VF NIX LFs that share a CGX LMAC reuse the same hardware PKIND programming. When HiGig2 or EDSA parsing is enabled, a VF NIX LF alloc must not reset the LMAC RX PKIND or default TX parse config over the PF setup.

Add cgx_get_pkind() and rvu_cgx_is_pkind_config_permitted() so VFs skip cgx_set_pkind(), rvu_npc_set_pkind(), and NIX_AF_LFX_TX_PARSE_CFG updates when the LMAC is using NPC_RX_HIGIG_PKIND or NPC_RX_EDSA_PKIND.

Database specific
{
    "cna_assigner": "Linux",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/74xxx/CVE-2026-74527.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
94d942c5fb970ac2166216838b278613decfa9a0
Fixed
d3c6b0f48f126a36955b3fb4154a59d0b3621d97
Fixed
3bd438a58e910db5dc369aa25dfed1fc95f1b596

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-74527.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
4.20.0
Fixed
7.1.8

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-74527.json"