CVE-2026-90080

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A NULL pointer dereference occurs in the octeontx2-pf driver when setting up representors. The af xdp zc qidx pointer, which tracks receive queues using AF XDP zero-copy, remains NULL for representors and other non-AF XDP paths. However, certain call sites execute the test bit() function on this pointer without validation. Specifically, switching to devlink eswitch mode triggers otx2 init hw resources(), which calls otx2 pool aq init(), leading to a system oops when the NULL bitmap is dereferenced.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.