CVE-2026-64225: octeontx2-af: CGX: add bounds check to cgx_speed_mbps index
In the Linux kernel, the following vulnerability has been resolved:
octeontx2-af: CGX: add bounds check to cgxspeedmbps index
cgxspeedmbps has 13 elements but RESPLINKSTATSPEED can yield values 0-15. If it returns a value >= 13, this causes an out-of-bounds array access. Add a bounds check and default to speed 0 if the index is out of range.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Compensating control
Apply the Linux kernel fix: in octeontx2-af (CGX), add a bounds check for the index used to access cgx_speed_mbps (13 elements) so that RESP_LINKSTAT_SPEED values that would be out of range cannot cause an out-of-bounds array access; default the speed to 0 when the index is out of bounds.
Event History
Frequently Asked Questions
What is the severity of CVE-2026-64225?
CVE-2026-64225 has a risk rating of 16, indicating a significant potential impact.
How do I fix CVE-2026-64225?
To fix CVE-2026-64225, update your Linux kernel to the patched version that includes the bounds check for cgx_speed_mbps.
Who is affected by CVE-2026-64225?
CVE-2026-64225 affects systems running the vulnerable versions of the Linux kernel that include the octeontx2-af driver.
What are the consequences of not addressing CVE-2026-64225?
Failing to address CVE-2026-64225 may lead to out-of-bounds array access which could potentially allow for denial of service or arbitrary code execution.
When was CVE-2026-64225 published?
CVE-2026-64225 was published on July 24, 2026.