In the Linux kernel, the following vulnerability has been resolved:
octeontx2-pf: fix double free in rvu_rep_rsrc_init()
rvu_rep_rsrc_init() allocates queue memory before calling otx2_init_hw_resources(). When hardware resource setup fails, otx2_init_hw_resources() already unwinds the partially initialized SQ, CQ, and aura state before returning an error. The representor error path then calls otx2_free_hw_resources() again and can free the same resources a second time.
Fix this by splitting the cleanup labels so that a failure from otx2_init_hw_resources() only releases queue memory. Keep the otx2_free_hw_resources() call for failures that happen after hardware resource initialization completed successfully.
The bug was first flagged by an experimental analysis tool we are developing for kernel memory-management bugs while analyzing v6.13-rc1. The tool is still under development and is not yet publicly available. Manual inspection confirms that the bug is still present in v7.1-rc3.
Runtime validation was not performed because reproducing this path requires OcteonTX2 representor hardware.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Redhat_linux | — | No solution exists | Jul 29, 2026 | Jul 24, 2026 |
| Ubuntu | — | Upgrade linux-image-7.0.0-1016-nvidia-64kUpgrade linux-image-7.0.0-1014-azureUpgrade linux-image-azureUpgrade linux-image-aws-64kUpgrade linux-image-raspi-realtimeUpgrade linux-image-nvidia-bos-64kUpgrade linux-image-nvidia-bosUpgrade linux-image-nvidia-64k-hwe-26.04Upgrade linux-image-awsUpgrade linux-image-nvidia-64kUpgrade linux-image-7.0.0-1015-raspiUpgrade linux-image-7.0.0-1011-oracle-64kUpgrade linux-image-7.0.0-1011-oracleUpgrade linux-image-gcp-64k-7.0Upgrade linux-image-7.0.0-1016-nvidiaUpgrade linux-image-azure-7.0Upgrade linux-image-nvidia-hwe-26.04Upgrade linux-image-gcp-64kUpgrade linux-image-raspi-7.0Upgrade linux-image-oracle-64kUpgrade linux-image-raspiUpgrade linux-image-nvidia-7.0Upgrade linux-image-gcpUpgrade linux-image-7.0.0-2016-nvidia-bos-64kUpgrade linux-image-7.0.0-2016-nvidia-bosUpgrade linux-image-gcp-7.0Upgrade linux-image-raspi-realtime-7.0Upgrade linux-image-7.0.0-1015-raspi-realtimeUpgrade linux-image-7.0.0-1011-gcpUpgrade linux-image-oracle-7.0Upgrade linux-image-aws-64k-7.0Upgrade linux-image-oracle-64k-7.0Upgrade linux-image-nvidia-64k-7.0Upgrade linux-image-nvidiaUpgrade linux-image-7.0.0-1009-awsUpgrade linux-image-nvidia-bos-7.0Upgrade linux-image-oracleUpgrade linux-image-7.0.0-1009-aws-64kUpgrade linux-image-7.0.0-1011-gcp-64kUpgrade linux-image-aws-7.0Upgrade linux-image-nvidia-bos-64k-7.0 | Jul 28, 2026 | Jul 28, 2026 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub