CVE-2026-72410

A flaw was found in the Linux kernel's octeontx2-af driver. This vulnerability stems from an incorrect validation check when setting the maximum number of NIX Logical Functions (LFs) using the devlink command. An attacker could potentially exploit this to configure the system in an unintended state, leading to instability or resource management problems within the network interface.

This vulnerability is rated as Low severity because exploitation is restricted to local access and only impacts environments deployed on specialized Marvell OCTEON TX2 hardware platforms. The flaw arises from an incorrect state check during the configuration of logical function allocations via the devlink interface, potentially resulting in resource inconsistency or a local denial of service. Standard enterprise installations that do not utilize this specific network adapter hardware are not exposed to this issue.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.