CVE-2026-64225

A flaw was found in the Linux kernel's octeontx2-af: CGX component. This vulnerability arises from an out-of-bounds array access. Specifically, the RESP_LINKSTAT_SPEED function can produce an index value that exceeds the allocated size of the cgx_speed_mbps array, leading to memory corruption. This could result in a system crash (Denial of Service).

A flaw was found in the Linux kernel octeontx2-af driver, in the CGX (Converged Gigabit Ethernet) firmware interface used by Marvell OcteonTX2 network adapters. The RESP_LINKSTAT_SPEED handling can produce a link speed index value that exceeds the bounds of the cgx_speed_mbps lookup array. Because this index is not validated before use, an unexpected firmware response can cause an out-of-bounds array access, leading to memory corruption and a kernel crash. This is classified as CWE-125 (Out-of-bounds Read) and results in a Denial of Service impact. Exploitation requires a system with an affected OcteonTX2 CGX-based network adapter present, consistent with the AV:L and PR:L values in the CVSS vector.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

There is no mitigation for this issue other than applying the fix. Systems that do not use OcteonTX2 CGX-based network hardware are not affected.