staging: octeon: add missing tasklet_kill in cvm_oct_tx_shutdown

MITRE NVD CVE.ORG JSON API

Summary

CVECVE-2026-93279
StatePUBLISHED
AssignerLinux
Source PriorityCVE Program / NVD first with legacy fallback
Published2026-09-24 16:17:25 UTC
Updated2026-10-19 10:17:19 UTC
DescriptionIn the Linux kernel, the following vulnerability has been resolved: staging: octeon: add missing tasklet_kill in cvm_oct_tx_shutdown The TX cleanup tasklet can be scheduled by the watchdog IRQ handler to execute cvm_oct_tx_do_cleanup. There can be a pending tasklet in the queue which might run after the cvm_oct_remove() frees net_device structures, causing a use-after-free in cvm_oct_tx_do_cleanup() as it iterates cvm_oct_device[] which is an array of netdevice pointers. Add tasklet_kill() after free_irq() to ensure the tasklet is no longer scheduled or running before teardown proceeds.

Vendor Declared Affected Products

SourceVendorProductVersionPlatforms
CNA Linux Linux affected 4898c560103fb8075c10a8e9d70e0ca26873075e 32efcb6d5f4e3f030e7b0a3ba5c6c0684dd07486 git Not specified
CNA Linux Linux affected 4898c560103fb8075c10a8e9d70e0ca26873075e d15226338dfaa84ffff142d32723cdf74d0c47c4 git Not specified
CNA Linux Linux affected 4898c560103fb8075c10a8e9d70e0ca26873075e a77efd85e0d48c877f66d2bc3ab89cc1b8dacd19 git Not specified
CNA Linux Linux affected 4898c560103fb8075c10a8e9d70e0ca26873075e b6365e4186322858a82c8713b1d0bd209c8e765a git Not specified
CNA Linux Linux affected 4898c560103fb8075c10a8e9d70e0ca26873075e 03d12490afd1198310ad0aba42462329832eb739 git Not specified
CNA Linux Linux affected 4898c560103fb8075c10a8e9d70e0ca26873075e 2c0c9956596e48654bb4855e2a0742748a0826a7 git Not specified
CNA Linux Linux affected 4898c560103fb8075c10a8e9d70e0ca26873075e 41a79bd9e5a74f8f483b3b206d10567912874fb4 git Not specified
CNA Linux Linux affected 4898c560103fb8075c10a8e9d70e0ca26873075e b9af44b0d20b2247c4eb0ea5cfca907d643eea50 git Not specified
CNA Linux Linux affected 2.6.34 Not specified
CNA Linux Linux unaffected 2.6.34 semver Not specified
CNA Linux Linux unaffected 5.10.270 5.10.* semver Not specified
CNA Linux Linux unaffected 5.15.221 5.15.* semver Not specified
CNA Linux Linux unaffected 6.1.188 6.1.* semver Not specified
CNA Linux Linux unaffected 6.6.157 6.6.* semver Not specified
CNA Linux Linux unaffected 6.12.110 6.12.* semver Not specified
CNA Linux Linux unaffected 6.18.52 6.18.* semver Not specified
CNA Linux Linux unaffected 7.2.6 7.2.* semver Not specified
CNA Linux Linux unaffected 7.3 * original_commit_for_fix Not specified

References

ReferenceSourceLinkTags
git.kernel.org/stable/c/2c0c9956596e48654bb4855e2a0742748a0826a7 416baaa9-dc9f-4396-8d5f-8c081fb06d67 git.kernel.org
git.kernel.org/stable/c/b9af44b0d20b2247c4eb0ea5cfca907d643eea50 416baaa9-dc9f-4396-8d5f-8c081fb06d67 git.kernel.org
git.kernel.org/stable/c/41a79bd9e5a74f8f483b3b206d10567912874fb4 416baaa9-dc9f-4396-8d5f-8c081fb06d67 git.kernel.org
git.kernel.org/stable/c/a77efd85e0d48c877f66d2bc3ab89cc1b8dacd19 416baaa9-dc9f-4396-8d5f-8c081fb06d67 git.kernel.org
git.kernel.org/stable/c/03d12490afd1198310ad0aba42462329832eb739 416baaa9-dc9f-4396-8d5f-8c081fb06d67 git.kernel.org
git.kernel.org/stable/c/d15226338dfaa84ffff142d32723cdf74d0c47c4 416baaa9-dc9f-4396-8d5f-8c081fb06d67 git.kernel.org
git.kernel.org/stable/c/32efcb6d5f4e3f030e7b0a3ba5c6c0684dd07486 416baaa9-dc9f-4396-8d5f-8c081fb06d67 git.kernel.org
git.kernel.org/stable/c/b6365e4186322858a82c8713b1d0bd209c8e765a 416baaa9-dc9f-4396-8d5f-8c081fb06d67 git.kernel.org
CVE Program record CVE.ORG www.cve.org canonical
NVD vulnerability detail NVD nvd.nist.gov canonical, analysis

© CVE.report 2026

Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. It is the responsibility of user to evaluate the accuracy, completeness or usefulness of any information, opinion, advice or other content. EACH USER WILL BE SOLELY RESPONSIBLE FOR ANY consequences of his or her direct or indirect use of this web site. ALL WARRANTIES OF ANY KIND ARE EXPRESSLY DISCLAIMED. This site will NOT BE LIABLE FOR ANY DIRECT, INDIRECT or any other kind of loss.

CVE, CWE, and OVAL are registred trademarks of The MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. This site includes MITRE data granted under the following license.

Free CVE JSON API cve.report/api

CVE.report and Source URL Uptime Status status.cve.report