CVE-2026-93278EPSS p8.0%
CVE-2026-93278CVE-2026-93278
Description
In the Linux kernel, the following vulnerability has been resolved:
staging: octeon: add missing napi_disable in cvm_oct_rx_shutdown
cvm_oct_rx_shutdown calls free_irq and netif_napi_del without
disabling the napi instance first. As the free_irq only waits
for completion of hard interrupt handlers, the napi poll
function could still be active. If cvm_oct_remove proceeds to
free the plat structure (which holds the NAPI instances), the
active poll function will access freed memory, resulting in a
use-after-free crash.
Scoring
| EPSS | 0.19% probability of exploitation · percentile 8.0% · 2026-10-05T12:00:23Z |
| Last modified | 2026-09-24 |