CVE-2026-93279
CVE CVE-2026-93279EUVD EUVD-2026-86151Published 2026-09-24T15:52:21.000Z
What the advisory describes
In the Linux kernel, the following vulnerability has been resolved: staging: octeon: add missing tasklet_kill in cvm_oct_tx_shutdown The TX cleanup tasklet can be scheduled by the watchdog IRQ handler to execute cvm_oct_tx_do_cleanup. There can be a pending tasklet in the queue which might run after the cvm_oct_remove() frees net_device structures, causing a use-after-free in cvm_oct_tx_do_cleanup() as it iterates cvm_oct_device[] which is an array of netdevice pointers. Add tasklet_kill() after free_irq() to ensure the tasklet is no longer scheduled or running before teardown proceeds.
Source: EUVD (ENISA), in the words of the advisory.
Products the advisory names
These come from the advisory itself, not from any check we performed.
- Linux — Linux patch: 6.6.157; patch: 7.3-rc1; patch: 7.2.6; 4898c560103fb8075c10a8e9d70e0ca26873075e <03d12490afd1198310ad0aba42462329832eb739; 2.6.34; 4898c560103fb8075c10a8e9d70e0ca26873075e <a77efd85e0d48c877f66d2bc3ab89cc1b8dacd19; patch: 6.18.52; patch: 5.15.221; 4898c560103fb8075c10a8e9d70e0ca26873075e <32efcb6d5f4e3f030e7b0a3ba5c6c0684dd07486; 4898c560103fb8075c10a8e9d70e0ca26873075e <b9af44b0d20b2247c4eb0ea5cfca907d643eea50; 4898c560103fb8075c10a8e9d70e0ca26873075e <b6365e4186322858a82c8713b1d0bd209c8e765a; 4898c560103fb8075c10a8e9d70e0ca26873075e <2c0c9956596e48654bb4855e2a0742748a0826a7; patch: 0; 4898c560103fb8075c10a8e9d70e0ca26873075e <d15226338dfaa84ffff142d32723cdf74d0c47c4; patch: 5.10.270; patch: 6.12.110; patch: 6.1.188; 4898c560103fb8075c10a8e9d70e0ca26873075e <41a79bd9e5a74f8f483b3b206d10567912874fb4
The versions shown are the advisory's own. Patchlage compares no version numbers and derives no judgement from them — which version is installed is something a person has to look up.
Carried in the product catalogue
An estate covering these products can be recorded in Patchlage. An advisory about them appears in the next morning's situation report.
- Linux — Linux
Does this concern one of your customers?
This page cannot answer that — it does not know your estate. Whoever has recorded their environments gets the answer the morning after publication, together with a paragraph they can forward to the customer unedited.
Try it for 28 daysPatchlage reports hits and suspected hits. About everything else this system says nothing — neither this page nor the situation report ever claims that an estate is safe.