CVE-2026-90084: octeontx2-vf: fix workqueue and netdev race in probe/remove
In the Linux kernel, the following vulnerability has been resolved:
octeontx2-vf: fix workqueue and netdev race in probe/remove
Initialize the VF workqueue before registernetdev() so ndosetrxmode does not queue work on a NULL workqueue. Unregister the netdev before destroying the workqueue, and add proper probe error cleanup.
Affected Software
Event History
Frequently Asked Questions
Which systems are exposed to this race?
Systems using the Linux kernel octeontx2 virtual-function network driver are exposed when the affected VF netdevice is being probed or removed. The issue involves the driver's workqueue and netdevice lifecycle.
What condition triggers the problem?
The race occurs when ndo_set_rx_mode queues work before the VF workqueue has been initialized, or when workqueue teardown occurs before the netdevice is unregistered. This can result in work being queued to a NULL or improperly torn-down workqueue.
What should be done if patching cannot be applied immediately?
The provided data does not identify a configuration workaround. Reducing exposure requires avoiding probe and removal activity for affected octeontx2 VF network devices until a kernel containing the fix can be deployed.