CVE-2026-72045

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the octeontx2-af driver where the rvu mbox handler lmtst tbl setup() function uses the req->base pcifunc payload field as a direct index into the LMT map table. Because this field is not sanitized, a Virtual Function (VF) caller can read the LMTLINE physical base address of another function and copy it into its own LMT map table entry. While the mailbox dispatcher authenticates the request header, the separate payload field remains unvalidated.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.