CVE-2026-90080
In the Linux kernel, the following vulnerability has been resolved: octeontx2-pf: fix NULL deref of af_xdp_zc_qidx on rep setup af_xdp_zc_qidx tracks receive queues using AF_XDP zero-copy and is allocated during PF/VF probe. Representors and other non-AF_XDP paths leave the pointer NULL, but several call sites used test_bit() on it unconditionally. Switching to devlink eswitch mode creates representors and runs otx2_init_hw_resources(), which reaches otx2_pool_aq_init() and oopses when dereferencing the NULL bitmap. Add NULL checks before every af_xdp_zc_qidx test_bit() use in the RSS, ethtool, XSK, and pool init paths.
Affected versions
Linux kernel versions
6.14.9,
6.15
and later are affected. Fixed in
6.18.52,
7.2.6,
7.3-rc1
and their respective stable series.
References
3 totalFrequently asked questions
-
What is CVE-2026-90080?
CVE-2026-90080 is a unscored severity Linux kernel vulnerability . It affects Linux kernel versions from 6.14.9 onward and has been patched in 6.18.52, 7.2.6 and 7.3-rc1. CVE-2026-90080 has not been confirmed as actively exploited and is not listed in the CISA KEV catalog.
-
Is there a patch available for CVE-2026-90080?
Yes. CVE-2026-90080 has been patched. Fixed versions include 6.18.52, 7.2.6 and 7.3-rc1. If you are running Linux kernel 6.14.9 or later up to the fix versions, apply the relevant patch for your kernel branch.
-
Is CVE-2026-90080 actively exploited?
No. CVE-2026-90080 has not been confirmed as actively exploited. It is not listed in the CISA Known Exploited Vulnerabilities (KEV) catalog.