In the Linux kernel, the following vulnerability has been resolved: octeontx2-pf: Fix aura BPID assignment when CONFIG_DCB is enabled Previously,… (CVE-2026-98806)

The Linux kernel octeontx2-pf driver had a vulnerability where BPID assignment under CONFIG_DCB assumed the queue_to_pfc_map was always initialized. For SDP Virtual Functions (VFs), this assumption was incorrect, causing invalid memory access. The patch introduces a NULL check for queue_to_pfc_map before dereferencing it and changes the logic to assign a default BPID first, then override it conditionally if CONFIG_DCB is enabled and the map exists.

The vulnerability could cause invalid memory access in the Linux kernel when using the octeontx2-pf driver with CONFIG_DCB enabled and SDP VFs, potentially leading to kernel instability or crashes. No information about exploitation in the wild is available.

A patch has been applied to the Linux kernel to fix this issue by adding a NULL check and improving BPID assignment logic. Users should update to a Linux kernel version that includes this fix. No other mitigation steps are indicated.