CVE-2026-46188
Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
28/05/2026
Last modified:
28/05/2026
Description
In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
octeon_ep_vf: add NULL check for napi_build_skb()<br />
<br />
napi_build_skb() can return NULL on allocation failure. In<br />
__octep_vf_oq_process_rx(), the result is used directly without a NULL<br />
check in both the single-buffer and multi-fragment paths, leading to a<br />
NULL pointer dereference.<br />
<br />
Add NULL checks after both napi_build_skb() calls, properly advancing<br />
descriptors and consuming remaining fragments on failure.



