CVE-2026-93278
Last modified
CVE-2026-93278 is a vulnerability of currently unknown severity. In the Linux kernel, the following vulnerability has been resolved: staging: octeon: add missing napi_disable in cvm_oct_rx_shutdown cvm_oct_rx_shutdown calls free_irq and netif_napi_del without disabling the napi instance first. As the free_irq only waits for completion of hard interrupt handlers, the napi poll function could still be active.
Description
In the Linux kernel, the following vulnerability has been resolved: staging: octeon: add missing napi_disable in cvm_oct_rx_shutdown cvm_oct_rx_shutdown calls free_irq and netif_napi_del without disabling the napi instance first. As the free_irq only waits for completion of hard interrupt handlers, the napi poll function could still be active. If cvm_oct_remove proceeds to free the plat structure (which holds the NAPI instances), the active poll function will access freed memory, resulting in a use-after-free crash.
Affected Software
Source: CNA advisory (CVE.org). NVD analysis pending.
| Vendor | Product | Versions |
|---|---|---|
| Linux | Linux | >= 3368c784bcf77124aaf39372e627016c36bd4472, < 158389d7af04bbf0664d91c2ce31fcc9eeace1eb; >= 3368c784bcf77124aaf39372e627016c36bd4472, < c124049c3a7006fd6caf629139a5722610bbffb4; >= 3368c784bcf77124aaf39372e627016c36bd4472, < 98f9036b2254c928cb44da0c77dba38f66f7d8f1; >= 3368c784bcf77124aaf39372e627016c36bd4472, < b38fbd68cc36b4f478a1e3cfc169b8616ae1337d; >= 3368c784bcf77124aaf39372e627016c36bd4472, < 89f9f433271fad9351de6a3c713b45b2cfb23e4a; >= 3368c784bcf77124aaf39372e627016c36bd4472, < b2243ffaac14cc3639b5b32a371aac37f96ee554; >= 3368c784bcf77124aaf39372e627016c36bd4472, < c0a9a8586a63fda49e61a6b83360feac2a60d898 |
| Linux | Linux | 2.6.34 |
References
Timeline
- Published
- Last Modified
- Status
- Received
Frequently Asked Questions
What is CVE-2026-93278?
How severe is CVE-2026-93278?
How do I fix CVE-2026-93278?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2026
- CVE-2026-93272In the Linux kernel, the following vulnerability has been re…
- CVE-2026-93273In the Linux kernel, the following vulnerability has been re…
- CVE-2026-93274In the Linux kernel, the following vulnerability has been re…
- CVE-2026-93275In the Linux kernel, the following vulnerability has been re…
- CVE-2026-93276In the Linux kernel, the following vulnerability has been re…
- CVE-2026-93277In the Linux kernel, the following vulnerability has been re…
- CVE-2026-93279In the Linux kernel, the following vulnerability has been re…
- CVE-2026-93280In the Linux kernel, the following vulnerability has been re…
- CVE-2026-93281In the Linux kernel, the following vulnerability has been re…
- CVE-2026-93282In the Linux kernel, the following vulnerability has been re…
- CVE-2026-93283In the Linux kernel, the following vulnerability has been re…
- CVE-2026-93292SigNoz versions from 0.88.0 before 0.142.1 contain a SQL inj…8.5
Are you affected by CVE-2026-93278?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST