CVE-2026-23070

Name of the Vulnerable Software and Affected Versions Linux kernel versions 6.19.0-rc5-00154-g76ec646abdf7-dirty through 6.19.0-rc5-00154-g76ec646abdf7-dirty

Description The Linux kernel contains a flaw related to insufficient checks for firmware data (fwdata) in the Octeontx2-af driver. Specifically, the firmware populates MAC address, link modes, and EEPROM data into a shared structure accessible by the kernel via the MAC block (CGX/RPM). Accessing this fwdata on systems booted without a MAC block can lead to kernel panics. The issue occurs during the rvu sdp init function and is triggered when accessing fwdata without proper validation.

Recommendations Linux kernel version 6.19.0-rc5-00154-g76ec646abdf7-dirty: Update to a newer version of the Linux kernel that includes the fix for this issue.