SB20260928233 - Incomplete cleanup in Linux kernel octeontx2 nic driver

Description

This security bulletin contains information about 1 vulnerability.

1) Incomplete cleanup (CVE-ID: CVE-2026-97966)

CWE-ID: CWE-459 - Incomplete cleanup

CVSSv4: 4.8 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N]

The vulnerability allows a local user to affect scheduler topology settings for later queue allocations.

The vulnerability exists due to incomplete cleanup of scheduler topology state in the OcteonTX2 PF QoS scheduler queue teardown logic when freeing QoS-allocated scheduler queues. A local user can trigger QoS scheduler hierarchy teardown to affect scheduler topology settings for later queue allocations.

PRIO_ANCHOR and RR_PRIO settings can persist in the shared scheduler pool.

Remediation

Install update from vendor's website.

References

• https://git.kernel.org/stable/c/0aa2dd6eaa347c7aab448df0eec0afcfe7489885
• https://git.kernel.org/stable/c/2df186418e17b30b319cf9ff81aad137692ab107
• https://git.kernel.org/stable/c/621c99be42e3f5cb68a6af9480a255218a761c4e
• https://git.kernel.org/stable/c/ef39fca8508597fa565cf2be72a884a712fb98af