Search: CVE-2026-63923

CVE-2026-63923 is a high-severity vulnerability in the Linux kernel affecting the octeontx2-af driver. It involves improper validation of the pcifunc field in the rvu_mbox_handler_rep_event_notify function, allowing an attacker controlling a VF mailbox to cause out-of-bounds writes. This can lead to memory corruption and potentially full system compromise. The issue is fixed by adding proper bounds checking using the is_pf_func_valid() function.