Skip to main content
VulnerabilityPublished Updated

CVE-2026-93278: Linux kernel · staging: octeon: add missing napi_disable in cvm_oct_rx_shutdown

Affects Linux kernelSource CVE Database V5

0

Not known to be exploited · fixed in c124049c3a7006fd6caf629139a5722610bbffb4 : update Linux kernel when convenient.

Data as of 26 Oct 2026, 17:16 UTC

Severity
Medium

Rated Medium by Threat Radar's AI analysis · CVSS not yet scored by NVD

EPSS
0.1% chance of exploitation in 30 days – higher than 8% of CVEsExploit Prediction Scoring System: the likelihood attackers will use this flaw soon.
Patch
Available – fixed in c124049c3a7006fd6caf629139a5722610bbffb4, c0a9a8586a63fda49e61a6b83360feac2a60d898, b2243ffaac14cc3639b5b32a371aac37f96ee554 +4

Exploitation evidence

  1. Disclosed: evidence found.

    CVE published 24 Sep 2026

  2. Detectable: no evidence on record.

    No public nuclei template indexed

  3. Weaponised: no evidence on record.

    No public exploit code indexed in Metasploit or Exploit-DB

  4. Exploited in the wild: no evidence on record.

    Not in CISA KEV and no source reports exploitation

  5. Observed by OffSeq Mirage: no evidence on record.

    No attack traffic recorded by OffSeq Mirage sensors

A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), the Metasploit, Exploit-DB and nuclei-templates index as of 26 Oct 2026.

What to do

Upgrade to a fixed release listed under Affected software.

Affected software

ProductAffectedFixed in
LinuxLinuxAffected
  • ≥ 3368c784bcf77124aaf39372e627016c36bd4472, < c124049c3a7006fd6caf629139a5722610bbffb4
Fixed in
  • c124049c3a7006fd6caf629139a5722610bbffb4
LinuxLinuxAffected
  • ≥ 3368c784bcf77124aaf39372e627016c36bd4472, < c0a9a8586a63fda49e61a6b83360feac2a60d898
Fixed in
  • c0a9a8586a63fda49e61a6b83360feac2a60d898
LinuxLinuxAffected
  • ≥ 3368c784bcf77124aaf39372e627016c36bd4472, < b2243ffaac14cc3639b5b32a371aac37f96ee554
Fixed in
  • b2243ffaac14cc3639b5b32a371aac37f96ee554
LinuxLinuxAffected
  • ≥ 3368c784bcf77124aaf39372e627016c36bd4472, < b38fbd68cc36b4f478a1e3cfc169b8616ae1337d
Fixed in
  • b38fbd68cc36b4f478a1e3cfc169b8616ae1337d
LinuxLinuxAffected
  • ≥ 3368c784bcf77124aaf39372e627016c36bd4472, < 158389d7af04bbf0664d91c2ce31fcc9eeace1eb
Fixed in
  • 158389d7af04bbf0664d91c2ce31fcc9eeace1eb
LinuxLinuxAffected
  • ≥ 3368c784bcf77124aaf39372e627016c36bd4472, < 98f9036b2254c928cb44da0c77dba38f66f7d8f1
Fixed in
  • 98f9036b2254c928cb44da0c77dba38f66f7d8f1

AI-suggested

A fix is available and has been applied in the Linux kernel. Users should update to the fixed kernel versions identified by the provided commit hashes to remediate this issue.

Description

A use-after-free vulnerability was fixed in the Linux kernel's octeon staging driver. The issue involved missing disabling of the NAPI instance before freeing interrupts, which could lead to the active poll function accessing freed memory and causing a crash.

References

Community reviews

Loading reviews…