CVE-2026-43296 Details
Description
In the Linux kernel, the following vulnerability has been resolved: octeontx2-af: Workaround SQM/PSE stalls by disabling sticky NIX SQ manager sticky mode is known to cause stalls when multiple SQs share an SMQ and transmit concurrently. Additionally, PSE may deadlock on transitions between sticky and non-sticky transmissions. There is also a credit drop issue observed when certain condition clocks are gated. work around these hardware errata by: - Disabling SQM sticky operation: - Clear TM6 (bit 15) - Clear TM11 (bit 14) - Disabling sticky → non-sticky transition path that can deadlock PSE: - Clear TM5 (bit 23) - Preventing credit drops by keeping the control-flow clock enabled: - Set TM9 (bit 21) These changes are applied via NIX_AF_SQM_DBG_CTL_STATUS. With this configuration the SQM/PSE maintain forward progress under load without credit loss, at the cost of disabling sticky optimizations.
A vulnerability in the Linux kernel's handling of the OcteonTX2 NIX SQ manager's sticky mode has been addressed. This mode can cause stalls when multiple send queues (SQs) share a single shared memory queue (SMQ) and transmit simultaneously. Additionally, transitions between sticky and non-sticky transmissions can lead to deadlocks in the Packet Service Engine (PSE). There is also a credit drop issue when certain condition clocks are gated. The vulnerability has been mitigated by disabling the sticky operation, preventing problematic transitions, and addressing the credit drop issue by keeping the control-flow clock enabled. These changes are applied through the NIX_AF_SQM_DBG_CTL_STATUS control register.
Users can apply the available workaround by disabling the SQ manager's sticky operation, clearing the appropriate bits in the NIX_AF_SQM_DBG_CTL_STATUS register, and enabling the control-flow clock to prevent credit drops.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
No SSVC data is available for this CVE.
References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://git.kernel.org/stable/c/36cc5a5e0178d5fb79e04173b8aa623b0108819a | kernel.org | Patch |
| https://git.kernel.org/stable/c/70e9a5760abfb6338d63994d4de6b0778ec795d6 | kernel.org | Patch |
| https://git.kernel.org/stable/c/8052d0587fb14b85539c3a14a226586c0c3d6b4c | kernel.org | Patch |
| https://git.kernel.org/stable/c/9a3fd301329474f449e75f86d8a4f6b9c603fd6c | kernel.org | Patch |
| https://git.kernel.org/stable/c/b7eba260a34e854e2487b8363c11976f082df00d | kernel.org | Patch |
| https://git.kernel.org/stable/c/cec2ceb35ce7bc874c43812bb39200d6cf691b87 | kernel.org | Patch |
| https://git.kernel.org/stable/c/d0b3c8a80336029d9356f429151eb27922d80a3c | kernel.org | Patch |
| https://git.kernel.org/stable/c/d9b549b6951ba178ec14339a031cae65f4e43fe1 | kernel.org | Patch |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-667 | Improper Locking | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| linux linux kernel | >= 5.5, < 5.10.252 >= 5.11, < 5.15.202 >= 5.16, < 6.1.165 >= 6.2, < 6.6.128 >= 6.7, < 6.12.75 >= 6.13, < 6.18.16 >= 6.19, < 6.19.6 |
CPE
Remediation
| |
Change History
4 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | kernel.org |
| May 15, 2026 | Initial Analysis | [email protected] |
| May 11, 2026 | CVE Modified | kernel.org |
| May 8, 2026 | New CVE Received | kernel.org |