CVE-2026-23013: net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback
In the Linux kernel, the following vulnerability has been resolved:
net: octeonepvf: fix freeirq devid mismatch in IRQ rollback
octepvfrequestirqs() requests MSI-X queue IRQs with devid set to ioqvector. If requestirq() fails part-way, the rollback loop calls freeirq() with devid set to 'oct', which does not match the original devid and may leave the irqaction registered.
This can keep IRQ handlers alive while ioqvector is later freed during unwind/teardown, leading to a use-after-free or crash when an interrupt fires.
Fix the error path to free IRQs with the same ioqvector devid used during requestirq().
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-23013?
CVE-2026-23013 is classified as a low severity vulnerability in the Linux kernel.
How do I fix CVE-2026-23013?
To fix CVE-2026-23013, update the Linux kernel to the latest patched version provided by your distribution.
What systems are affected by CVE-2026-23013?
CVE-2026-23013 affects systems running the Linux kernel with the octeon_ep_vf driver.
What are the potential impacts of CVE-2026-23013?
The potential impacts of CVE-2026-23013 include issues with interrupt handling in systems using the affected driver.
Is there a workaround for CVE-2026-23013?
Currently, there are no known workarounds for CVE-2026-23013, and upgrading is the safest option.