In the Linux kernel, the following vulnerability has been resolved:
net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback
octep_vf_request_irqs() requests MSI-X queue IRQs with dev_id set to ioq_vector. If request_irq() fails part-way, the rollback loop calls free_irq() with dev_id set to 'oct', which does not match the original dev_id and may leave the irqaction registered.
This can keep IRQ handlers alive while ioq_vector is later freed during unwind/teardown, leading to a use-after-free or crash when an interrupt fires.
Fix the error path to free IRQs with the same ioq_vector dev_id used during request_irq().
CVSS Details
- CVSS 3.1 Base Score: 7
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 23, 2026 | Jul 23, 2026 |
| Redhat_linux | — | No solution exists | Jul 17, 2026 | Jan 25, 2026 |
| Ubuntu | — | Upgrade linux-image-realtime-6.17Upgrade linux-image-6.17.0-1021-gcpUpgrade linux-image-oem-24.04dUpgrade linux-image-6.17.0-1019-oracle-64kUpgrade linux-image-oem-24.04aUpgrade linux-image-6.17.0-1021-gcp-64kUpgrade linux-image-gcp-64kUpgrade linux-image-nvidia-hwe-24.04Upgrade linux-image-azureUpgrade linux-image-nvidia-6.17Upgrade linux-image-nvidia-64k-hwe-24.04Upgrade linux-image-oem-24.04Upgrade linux-image-oem-24.04cUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-gcpUpgrade linux-image-oracle-64kUpgrade linux-image-azure-6.17Upgrade linux-image-6.17.0-1030-oemUpgrade linux-image-nvidia-64k-6.17Upgrade linux-image-oracle-6.17Upgrade linux-image-azure-fde-6.17Upgrade linux-image-6.17.0-1019-oracleUpgrade linux-image-6.17.0-1018-azure-fdeUpgrade linux-image-gcp-6.17Upgrade linux-image-6.17.0-1031-nvidiaUpgrade linux-image-oracleUpgrade linux-image-azure-fdeUpgrade linux-image-6.17.0-1031-nvidia-64kUpgrade linux-image-6.17.0-1021-azureUpgrade linux-image-oem-24.04bUpgrade linux-image-oem-6.17Upgrade linux-image-oracle-64k-6.17Upgrade linux-image-6.17.0-1018-realtimeUpgrade linux-image-gcp-64k-6.17 | Jul 21, 2026 | Jul 20, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub