In the Linux kernel, the following vulnerability has been resolved:
Octeontx2-af: Add proper checks for fwdata
firmware populates MAC address, link modes (supported, advertised) and EEPROM data in shared firmware structure which kernel access via MAC block(CGX/RPM).
Accessing fwdata, on boards booted with out MAC block leading to kernel panics.
Internal error: Oops: 0000000096000005 [#1] SMP [ 10.460721] Modules linked in: [ 10.463779] CPU: 0 UID: 0 PID: 174 Comm: kworker/0:3 Not tainted 6.19.0-rc5-00154-g76ec646abdf7-dirty #3 PREEMPT [ 10.474045] Hardware name: Marvell OcteonTX CN98XX board (DT) [ 10.479793] Workqueue: events work_for_cpu_fn [ 10.484159] pstate: 80400009 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 10.491124] pc : rvu_sdp_init+0x18/0x114 [ 10.495051] lr : rvu_probe+0xe58/0x1d18
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 23, 2026 | Jul 23, 2026 |
| Oracle_linux | — | Upgrade kernel-uek | Mar 25, 2026 | Feb 4, 2026 |
| Redhat_linux | — | No solution exists | Jul 17, 2026 | Feb 4, 2026 |
| Ubuntu | — | Upgrade linux-image-azure-fdeUpgrade linux-image-oracle-64k-6.17Upgrade linux-image-oem-24.04bUpgrade linux-image-oem-24.04cUpgrade linux-image-6.17.0-1019-oracleUpgrade linux-image-6.17.0-1021-gcpUpgrade linux-image-nvidia-6.17Upgrade linux-image-6.17.0-1031-nvidia-64kUpgrade linux-image-6.17.0-1021-azureUpgrade linux-image-oracle-6.17Upgrade linux-image-oem-6.17Upgrade linux-image-nvidia-64k-6.17Upgrade linux-image-6.17.0-1031-nvidiaUpgrade linux-image-azure-fde-6.17Upgrade linux-image-gcp-64k-6.17Upgrade linux-image-gcp-6.17Upgrade linux-image-oracleUpgrade linux-image-gcp-64kUpgrade linux-image-nvidia-hwe-24.04Upgrade linux-image-nvidia-64k-hwe-24.04Upgrade linux-image-realtime-6.17Upgrade linux-image-oem-24.04aUpgrade linux-image-6.17.0-1030-oemUpgrade linux-image-6.17.0-1021-gcp-64kUpgrade linux-image-oracle-64kUpgrade linux-image-azureUpgrade linux-image-6.17.0-1018-azure-fdeUpgrade linux-image-azure-6.17Upgrade linux-image-gcpUpgrade linux-image-6.17.0-1019-oracle-64kUpgrade linux-image-6.17.0-1018-realtimeUpgrade linux-image-oem-24.04Upgrade linux-image-realtime-hwe-24.04Upgrade linux-image-oem-24.04d | Jul 21, 2026 | Jul 20, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jul 17, 2026 | Feb 4, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub