CVE-2026-63923

A flaw was found in the Linux kernel's octeontx2-af driver. A malicious Virtual Function (VF) attached to a Physical Function (PF) in switchdev representor mode can send a specially crafted REP_EVENT_NOTIFY message. This message contains an unvalidated pcifunc field, which can lead to an out-of-bounds write in the rvu_rep_wq_handler. This vulnerability can result in memory corruption, potentially leading to a denial of service.

This vulnerability is rated as an Important impact because a compromised virtual function can trigger out-of-bounds memory writes within host kernel space, enabling host crashes or potential privilege escalation. Exploitation is restricted to systems utilizing specialized Marvell OcteonTX2 hardware where physical functions have been explicitly placed into switchdev representor mode. Environments without this specific networking hardware or configurations not employing switchdev representors remain unaffected.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.