CVE-2026-74527

A flaw was found in the Linux kernel's octeontx2-af driver. When Physical Functions (PFs) and Virtual Functions (VFs) share a network interface controller's (NIC) hardware programming (PKIND state), a Virtual Function could overwrite the configuration set by the Physical Function. This could lead to unintended changes in network traffic processing, potentially causing a denial of service or unexpected behavior.

A VF on octeontx2 can overwrite shared CGX LMAC PKIND and TX parse configuration that should be controlled by the PF when special parsing modes such as HiGig2 or EDSA are active. This is a VF/PF isolation and authorization issue rather than memory corruption. For the CVSS the PR:L is used because a local actor with access to an assigned VF or guest side VF control can trigger the relevant mailbox and LF allocation paths, while full host administrator privileges are not necessarily required in SR-IOV deployments. The issue is not directly reachable from the external network by ordinary packet traffic. Impact is mainly denial of service or network policy disruption due to corrupted parse configuration, with a paranoid limited confidentiality and integrity impact if the parser state affects traffic separation or classification on a shared LMAC.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.