CVE-2026-46249

{"id": "CVE-2026-46249", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.5, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "NONE"}, "impactScore": 3.6, "exploitabilityScore": 1.8}]}, "affected": [{"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "affectedData": [{"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "54494aa5d1e68945dc79feb7c8461cd382e11d8a", "lessThan": "b7605b9301abc18fbbf2b0e23fdd281fc768955d", "versionType": "git"}, {"status": "affected", "version": "54494aa5d1e68945dc79feb7c8461cd382e11d8a", "lessThan": "9769a09afda20a006b528b9e723effcae45965b2", "versionType": "git"}, {"status": "affected", "version": "54494aa5d1e68945dc79feb7c8461cd382e11d8a", "lessThan": "57821d1436ba1c6a6973aa32d54166fdec35558c", "versionType": "git"}, {"status": "affected", "version": "54494aa5d1e68945dc79feb7c8461cd382e11d8a", "lessThan": "8b5ed7c5417b7013d35b6f2507dab739013ba1a9", "versionType": "git"}, {"status": "affected", "version": "54494aa5d1e68945dc79feb7c8461cd382e11d8a", "lessThan": "7d56ba306e93d04696718963fb4cda2883ee7585", "versionType": "git"}, {"status": "affected", "version": "54494aa5d1e68945dc79feb7c8461cd382e11d8a", "lessThan": "9c3398e5b3a914b74276d44ab54c49123b89c61a", "versionType": "git"}, {"status": "affected", "version": "54494aa5d1e68945dc79feb7c8461cd382e11d8a", "lessThan": "1370736836a18b5e0cd74bcc9cffe11d21f1fe79", "versionType": "git"}, {"status": "affected", "version": "54494aa5d1e68945dc79feb7c8461cd382e11d8a", "lessThan": "2d2d574309e3ae84ee794869a5da8b4c38753a94", "versionType": "git"}], "programFiles": ["drivers/net/ethernet/marvell/octeontx2/af/rvu.c"], "defaultStatus": "unaffected"}, {"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "4.20"}, {"status": "unaffected", "version": "0", "lessThan": "4.20", "versionType": "semver"}, {"status": "unaffected", "version": "5.10.252", "versionType": "semver", "lessThanOrEqual": "5.10.*"}, {"status": "unaffected", "version": "5.15.202", "versionType": "semver", "lessThanOrEqual": "5.15.*"}, {"status": "unaffected", "version": "6.1.165", "versionType": "semver", "lessThanOrEqual": "6.1.*"}, {"status": "unaffected", "version": "6.6.128", "versionType": "semver", "lessThanOrEqual": "6.6.*"}, {"status": "unaffected", "version": "6.12.75", "versionType": "semver", "lessThanOrEqual": "6.12.*"}, {"status": "unaffected", "version": "6.18.14", "versionType": "semver", "lessThanOrEqual": "6.18.*"}, {"status": "unaffected", "version": "6.19.4", "versionType": "semver", "lessThanOrEqual": "6.19.*"}, {"status": "unaffected", "version": "7.0", "versionType": "original_commit_for_fix", "lessThanOrEqual": "*"}], "programFiles": ["drivers/net/ethernet/marvell/octeontx2/af/rvu.c"], "defaultStatus": "affected"}]}], "published": "2026-06-03T18:16:25.237", "references": [{"url": "https://git.kernel.org/stable/c/1370736836a18b5e0cd74bcc9cffe11d21f1fe79", "tags": ["Patch"], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/2d2d574309e3ae84ee794869a5da8b4c38753a94", "tags": ["Patch"], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/57821d1436ba1c6a6973aa32d54166fdec35558c", "tags": ["Patch"], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/7d56ba306e93d04696718963fb4cda2883ee7585", "tags": ["Patch"], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/8b5ed7c5417b7013d35b6f2507dab739013ba1a9", "tags": ["Patch"], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/9769a09afda20a006b528b9e723effcae45965b2", "tags": ["Patch"], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/9c3398e5b3a914b74276d44ab54c49123b89c61a", "tags": ["Patch"], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/b7605b9301abc18fbbf2b0e23fdd281fc768955d", "tags": ["Patch"], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-noinfo"}]}], "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nocteontx2-af: Fix PF driver crash with kexec kernel booting\n\nDuring a kexec reboot the hardware is not power-cycled, so AF state from\nthe old kernel can persist into the new kernel. When AF and PF drivers\nare built as modules, the PF driver may probe before AF reinitializes\nthe hardware.\n\nThe PF driver treats the RVUM block revision as an indication that AF\ninitialization is complete. If this value is left uncleared at shutdown,\nPF may incorrectly assume AF is ready and access stale hardware state,\nleading to a crash.\n\nClear the RVUM block revision during AF shutdown to avoid PF\nmis-detecting AF readiness after kexec."}, {"lang": "es", "value": "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\nocteontx2-af: Soluci\u00f3n a la ca\u00edda del controlador PF con el arranque del kernel kexec\n\nDurante un reinicio kexec, el hardware no se apaga y enciende, por lo que el estado de AF del kernel antiguo puede persistir en el nuevo kernel. Cuando los controladores AF y PF se compilan como m\u00f3dulos, el controlador PF puede sondear antes de que AF reinicialice el hardware.\n\nEl controlador PF trata la revisi\u00f3n del bloque RVUM como una indicaci\u00f3n de que la inicializaci\u00f3n de AF est\u00e1 completa. Si este valor se deja sin borrar al apagar, PF puede asumir incorrectamente que AF est\u00e1 listo y acceder a un estado de hardware obsoleto, lo que lleva a una ca\u00edda.\n\nBorrar la revisi\u00f3n del bloque RVUM durante el apagado de AF para evitar que PF detecte incorrectamente la disponibilidad de AF despu\u00e9s de kexec."}], "lastModified": "2026-07-22T20:10:00.127", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "AC83D218-5B5C-4467-AFA7-2B557B765D38", "versionEndExcluding": "5.10.252", "versionStartIncluding": "4.20"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4002FC2B-1456-4666-B240-0EBF590C4671", "versionEndExcluding": "5.15.202", "versionStartIncluding": "5.11"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "797C7F46-D0BE-4FB8-A502-C5EF8E6B6654", "versionEndExcluding": "6.1.165", "versionStartIncluding": "5.16"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "851E9353-6C09-4CC9-877E-E09DB164A3C2", "versionEndExcluding": "6.6.128", "versionStartIncluding": "6.2"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "BCE16369-98ED-41CF-8995-DFDC10B288D2", "versionEndExcluding": "6.12.75", "versionStartIncluding": "6.7"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "BF463CB7-1F58-4607-B847-77ED23E4B9B7", "versionEndExcluding": "6.18.14", "versionStartIncluding": "6.13"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "672A3E79-EC03-479D-8503-361DFBDC8092", "versionEndExcluding": "6.19.4", "versionStartIncluding": "6.19"}], "operator": "OR"}]}], "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}