CVE-2026-90080

A flaw was found in the Linux kernel's octeontx2-pf driver. When switching to devlink eswitch mode, a null pointer dereference can occur in the af_xdp_zc_qidx handling. This issue arises because the af_xdp_zc_qidx pointer, which tracks receive queues, is not properly initialized in certain non-AF_XDP paths, leading to an unconditional test_bit() call on a NULL bitmap. A local attacker or specific system configuration could trigger this, causing a kernel crash and resulting in a Denial of Service (DoS).

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.