{"id":"CVE-2026-93278","revision":"0c5435c7a0964866834330d750593ceb","records":[{"revision":"0c5435c7a0964866834330d750593ceb","observedAt":"2026-10-23T15:48:27.903+00:00","statement":{"source":"cve-program","id":"CVE-2026-93278","aliases":[],"title":"staging: octeon: add missing napi_disable in cvm_oct_rx_shutdown","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nstaging: octeon: add missing napi_disable in cvm_oct_rx_shutdown\n\ncvm_oct_rx_shutdown calls free_irq and netif_napi_del without\ndisabling the napi instance first. As the free_irq only waits\nfor completion of hard interrupt handlers, the napi poll\nfunction could still be active. If cvm_oct_remove proceeds to\nfree the plat structure (which holds the NAPI instances), the\nactive poll function will access freed memory, resulting in a\nuse-after-free crash.","state":0,"publishedAt":"2026-09-24T15:52:20.416+00:00","modifiedAt":"2026-10-19T09:08:32.599+00:00","affected":[{"ecosystem":"Vendor product","name":"Linux","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"product\": \"Linux\",\n                    \"vendor\": \"Linux\",\n                    \"defaultStatus\": \"unaffected\",\n                    \"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\n                    \"programFiles\": [\n                        \"drivers/staging/octeon/ethernet-rx.c\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"version\": \"3368c784bcf77124aaf39372e627016c36bd4472\",\n                            \"lessThan\": \"158389d7af04bbf0664d91c2ce31fcc9eeace1eb\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"3368c784bcf77124aaf39372e627016c36bd4472\",\n                            \"lessThan\": \"c124049c3a7006fd6caf629139a5722610bbffb4\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"3368c784bcf77124aaf39372e627016c36bd4472\",\n                            \"lessThan\": \"98f9036b2254c928cb44da0c77dba38f66f7d8f1\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"3368c784bcf77124aaf39372e627016c36bd4472\",\n                            \"lessThan\": \"b38fbd68cc36b4f478a1e3cfc169b8616ae1337d\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"3368c784bcf77124aaf39372e627016c36bd4472\",\n                            \"lessThan\": \"89f9f433271fad9351de6a3c713b45b2cfb23e4a\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"3368c784bcf77124aaf39372e627016c36bd4472\",\n                            \"lessThan\": \"b2243ffaac14cc3639b5b32a371aac37f96ee554\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"3368c784bcf77124aaf39372e627016c36bd4472\",\n                            \"lessThan\": \"c0a9a8586a63fda49e61a6b83360feac2a60d898\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        }\n                    ]\n                }"},{"ecosystem":"Vendor product","name":"Linux","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"product\": \"Linux\",\n                    \"vendor\": \"Linux\",\n                    \"defaultStatus\": \"affected\",\n                    \"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\n                    \"programFiles\": [\n                        \"drivers/staging/octeon/ethernet-rx.c\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"version\": \"2.6.34\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"0\",\n                            \"lessThan\": \"2.6.34\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"5.15.221\",\n                            \"lessThanOrEqual\": \"5.15.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.1.188\",\n                            \"lessThanOrEqual\": \"6.1.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.6.157\",\n                            \"lessThanOrEqual\": \"6.6.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.12.110\",\n                            \"lessThanOrEqual\": \"6.12.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.18.52\",\n                            \"lessThanOrEqual\": \"6.18.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"7.2.6\",\n                            \"lessThanOrEqual\": \"7.2.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"7.3\",\n                            \"lessThanOrEqual\": \"*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"original_commit_for_fix\"\n                        }\n                    ]\n                }"}],"metrics":[],"references":["https://git.kernel.org/stable/c/158389d7af04bbf0664d91c2ce31fcc9eeace1eb","https://git.kernel.org/stable/c/c124049c3a7006fd6caf629139a5722610bbffb4","https://git.kernel.org/stable/c/98f9036b2254c928cb44da0c77dba38f66f7d8f1","https://git.kernel.org/stable/c/b38fbd68cc36b4f478a1e3cfc169b8616ae1337d","https://git.kernel.org/stable/c/89f9f433271fad9351de6a3c713b45b2cfb23e4a","https://git.kernel.org/stable/c/b2243ffaac14cc3639b5b32a371aac37f96ee554","https://git.kernel.org/stable/c/c0a9a8586a63fda49e61a6b83360feac2a60d898"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-93278","license":"CVE Program Terms of Use","key":"cve-program:CVE-2026-93278","identifiers":["CVE-2026-93278"]},"retained":false,"historicalAffected":[]}],"coverage":[]}