{"id":"CVE-2026-93246","revision":"7eacb4d680e845d5ada644a21c5bd3b6","records":[{"revision":"7eacb4d680e845d5ada644a21c5bd3b6","observedAt":"2026-10-23T15:48:27.903+00:00","statement":{"source":"cve-program","id":"CVE-2026-93246","aliases":[],"title":"octeontx2-af: fix out-of-bounds read setting MSI-X irq affinity","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nocteontx2-af: fix out-of-bounds read setting MSI-X irq affinity\n\nrvu_register_interrupts() walks every MSI-X vector and uses strstr()\nto match \"Mbox\" or \"FLR\" in irq_name before pinning those interrupts\nto CPU 0. irq_name is a per-vector NAME_SIZE buffer, but not every\nslot is populated before this loop runs. strstr() keeps scanning until\nit finds a NUL terminator, so an uninitialized slot can trigger a KASAN\nslab-out-of-bounds read at boot when debug options are enabled.\n\nUse strnstr() with NAME_SIZE to bound the search within each vector's\nname buffer.","state":0,"publishedAt":"2026-09-24T15:51:03.587+00:00","modifiedAt":"2026-10-19T09:07:58.955+00:00","affected":[{"ecosystem":"Vendor product","name":"Linux","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"product\": \"Linux\",\n                    \"vendor\": \"Linux\",\n                    \"defaultStatus\": \"unaffected\",\n                    \"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\n                    \"programFiles\": [\n                        \"drivers/net/ethernet/marvell/octeontx2/af/rvu.c\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"version\": \"4e527f1e5c155ce28164ba34cad47b635d16f827\",\n                            \"lessThan\": \"2f460aa0211e97c011ef0cfe5016f8f2a2ed059b\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"4e527f1e5c155ce28164ba34cad47b635d16f827\",\n                            \"lessThan\": \"4d5df98369c5f45710b786499f8bd7ffc3196433\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        }\n                    ]\n                }"},{"ecosystem":"Vendor product","name":"Linux","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"product\": \"Linux\",\n                    \"vendor\": \"Linux\",\n                    \"defaultStatus\": \"affected\",\n                    \"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\n                    \"programFiles\": [\n                        \"drivers/net/ethernet/marvell/octeontx2/af/rvu.c\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"version\": \"7.1\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"0\",\n                            \"lessThan\": \"7.1\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"7.2.6\",\n                            \"lessThanOrEqual\": \"7.2.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"7.3\",\n                            \"lessThanOrEqual\": \"*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"original_commit_for_fix\"\n                        }\n                    ]\n                }"}],"metrics":[],"references":["https://git.kernel.org/stable/c/2f460aa0211e97c011ef0cfe5016f8f2a2ed059b","https://git.kernel.org/stable/c/4d5df98369c5f45710b786499f8bd7ffc3196433"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-93246","license":"CVE Program Terms of Use","key":"cve-program:CVE-2026-93246","identifiers":["CVE-2026-93246"]},"retained":false,"historicalAffected":[]}],"coverage":[]}