CVE-2026-23013

HIGH EPSS 4.8%
Published Jan 25, 20265mo ago · Modified Jun 17, 20261w ago
7.8 CVSS 3.1
High
Find Similar
Published Jan 25, 2026 5mo ago
Last Modified Jun 17, 2026 1w ago

Description

In the Linux kernel, the following vulnerability has been resolved: net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback octep_vf_request_irqs() requests MSI-X queue IRQs with dev_id set to ioq_vector. If request_irq() fails part-way, the rollback loop calls free_irq() with dev_id set to 'oct', which does not match the original dev_id and may leave the irqaction registered. This can keep IRQ handlers alive while ioq_vector is later freed during unwind/teardown, leading to a use-after-free or crash when an interrupt fires. Fix the error path to free IRQs with the same ioq_vector dev_id used during request_irq().

CVSS Details

Base Score
7.8
Exploitability
1.8
Impact
5.9
Vector string
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack Vector Local
Attack Complexity Low
Privileges Required Low
User Interaction None
Scope Unchanged
Confidentiality High
Integrity High
Availability High

Threat Intelligence

EPSS Exploit Probability
4.8% percentile
Exploit & Patch Status
No Known Exploit
Patch Available

Weaknesses 1

CWE-416 Use After Free Memory Safety

Affected Products 11

VendorProductVersionRange
linuxlinux_kernel*≥6.9.1  –  <6.12.67
linuxlinux_kernel*≥6.13  –  <6.18.7
linuxlinux_kernel6.9any
linuxlinux_kernel6.19any
linuxlinux_kernel6.19any
linuxlinux_kernel6.19any
linuxlinux_kernel6.19any
linuxlinux_kernel6.19any
linuxlinux_kernel6.19any
linuxlinux_kernel6.19any
linuxlinux_kernel6.19any

References 3

  • git.kernel.org https://git.kernel.org/stable/c/aa05a8371ae4a452df623f7202c72409d3c50e40
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/aa4c066229b05fc3d3c5f42693d25b1828533b6e
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/f93fc5d12d69012788f82151bee55fce937e1432
    Patch

Remediation

  • git.kernel.org https://git.kernel.org/stable/c/aa05a8371ae4a452df623f7202c72409d3c50e40
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/aa4c066229b05fc3d3c5f42693d25b1828533b6e
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/f93fc5d12d69012788f82151bee55fce937e1432
    Patch