CVE-2026-46249 Details
Description
In the Linux kernel, the following vulnerability has been resolved: octeontx2-af: Fix PF driver crash with kexec kernel booting During a kexec reboot the hardware is not power-cycled, so AF state from the old kernel can persist into the new kernel. When AF and PF drivers are built as modules, the PF driver may probe before AF reinitializes the hardware. The PF driver treats the RVUM block revision as an indication that AF initialization is complete. If this value is left uncleared at shutdown, PF may incorrectly assume AF is ready and access stale hardware state, leading to a crash. Clear the RVUM block revision during AF shutdown to avoid PF mis-detecting AF readiness after kexec.
A vulnerability in the Linux kernel's OcteonTX2 AF driver can lead to a crash of the PF driver during a kexec reboot. This issue occurs because the hardware is not power-cycled, allowing the AF state from the old kernel to persist into the new one. When both AF and PF drivers are built as modules, the PF driver may initialize before the AF driver has a chance to reinitialize the hardware. The PF driver relies on the RVUM block revision to determine if AF initialization is complete. If this revision is not cleared before shutdown, the PF driver may mistakenly assume that AF is ready, leading to a crash by accessing outdated hardware state. The vulnerability has been addressed by clearing the RVUM block revision during AF shutdown, preventing the PF driver from misinterpreting AF's readiness after a kexec reboot.
The vulnerability has been fixed in the Linux kernel by clearing the RVUM block revision during the AF driver's shutdown process. Users should upgrade to the latest version of the Linux kernel where this fix is applied.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
No SSVC data is available for this CVE.
References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://git.kernel.org/stable/c/1370736836a18b5e0cd74bcc9cffe11d21f1fe79 | kernel.org | Patch |
| https://git.kernel.org/stable/c/2d2d574309e3ae84ee794869a5da8b4c38753a94 | kernel.org | Patch |
| https://git.kernel.org/stable/c/57821d1436ba1c6a6973aa32d54166fdec35558c | kernel.org | Patch |
| https://git.kernel.org/stable/c/7d56ba306e93d04696718963fb4cda2883ee7585 | kernel.org | Patch |
| https://git.kernel.org/stable/c/8b5ed7c5417b7013d35b6f2507dab739013ba1a9 | kernel.org | Patch |
| https://git.kernel.org/stable/c/9769a09afda20a006b528b9e723effcae45965b2 | kernel.org | Patch |
| https://git.kernel.org/stable/c/9c3398e5b3a914b74276d44ab54c49123b89c61a | kernel.org | Patch |
| https://git.kernel.org/stable/c/b7605b9301abc18fbbf2b0e23fdd281fc768955d | kernel.org | Patch |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| NVD-CWE-noinfo | Insufficient Information to Classify Weakness | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| linux linux kernel | >= 4.20, < 5.10.252 >= 5.11, < 5.15.202 >= 5.16, < 6.1.165 >= 6.2, < 6.6.128 >= 6.7, < 6.12.75 >= 6.13, < 6.18.14 >= 6.19, < 6.19.4 |
CPE
Remediation
| |
Change History
4 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jul 22, 2026 | CVE Translated | [email protected] |
| Jun 17, 2026 | CVE Modified | kernel.org |
| Jun 9, 2026 | Initial Analysis | [email protected] |
| Jun 3, 2026 | New CVE Received | kernel.org |