Skip to main content

Linux EUVDEUVD-2026-86150

| CVE-2026-93278
2026-09-24 Linux GHSA-7ppg-qghw-hg2g
View
Monitor Track and reassess. Why: No CVSS yet + weak signal (CWE or non-zero EPSS).
Patch available 0.2% exploitation probability (EPSS)

Get an e-mail when this CVE is exploited, patched or re-scored. Free account.

Alert me

AnalysisCVE.org

In the Linux kernel, the following vulnerability has been resolved:

staging: octeon: add missing napi_disable in cvm_oct_rx_shutdown

cvm_oct_rx_shutdown calls free_irq and netif_napi_del without disabling the napi instance first. As the free_irq only waits for completion of hard interrupt handlers, the napi poll function could still be active. If cvm_oct_remove proceeds to free the plat structure (which holds the NAPI instances), the active poll function will access freed memory, resulting in a use-after-free crash.

Affected VersionsENISA

Linux 3368c784bcf77124aaf39372e627016c36bd4472 <98f9036b2254c928cb44da0c77dba38f66f7d8f1
Linux 3368c784bcf77124aaf39372e627016c36bd4472 <c0a9a8586a63fda49e61a6b83360feac2a60d898
Linux patch: 7.3-rc1
Linux patch: 5.15.221
Linux 3368c784bcf77124aaf39372e627016c36bd4472 <c124049c3a7006fd6caf629139a5722610bbffb4
Linux patch: 6.12.110
Linux 2.6.34
Linux patch: 0
Linux patch: 6.1.188
Linux 3368c784bcf77124aaf39372e627016c36bd4472 <89f9f433271fad9351de6a3c713b45b2cfb23e4a
Linux patch: 6.18.52
Linux patch: 6.6.157
Linux 3368c784bcf77124aaf39372e627016c36bd4472 <b38fbd68cc36b4f478a1e3cfc169b8616ae1337d
Linux 3368c784bcf77124aaf39372e627016c36bd4472 <b2243ffaac14cc3639b5b32a371aac37f96ee554
Linux patch: 7.2.6
Linux 3368c784bcf77124aaf39372e627016c36bd4472 <158389d7af04bbf0664d91c2ce31fcc9eeace1eb

Affected Packages

euvd linux no fix

Source: OSV (Open Source Vulnerabilities)

Affects your stack

Affects 1 package in euvd

Checking this CVE against your own stacks and servers is part of the Basic plan and up.

Know when the next one hits your stack

  • Watch products and get an email when something new is published
  • Check this CVE against your own stack and servers
  • Exploit and PoC references, threat intelligence from 22 sources

No credit card · 7-day full trial

Lifecycle Timeline

2
Patch available
Sep 24, 2026 - 17:03 EUVD
CVE Published
Sep 24, 2026 - 15:52 cve.org
UNKNOWN (no severity yet)

Threat Intelligence Overview

EPSS Score
0.2%
Top 92% exploitable
Data Quality
3 sources
Confidence: Low

How this decision was reached

The engine reads each signal below and applies a fixed list of rules from top to bottom. The first rule that matches sets the recommended action – like a statement, every line is shown.

SignalValue
Severity Not scored yet
CISA KEV No
Public POC No
EPSS 0.2%
Patch available Yes
Active threat No
Deciding rule
No CVSS yet + weak signal (CWE or non-zero EPSS)
What every action level means
Emergency Immediate action required. Criteria: CRITICAL + in CISA KEV (actively exploited) without patch, OR CRITICAL + EPSS > 30% without patch, OR CRITICAL + active threat signals without patch.
Act Now Prioritize within 24-48h. Criteria: in KEV with patch available, OR CRITICAL + public POC, OR HIGH + EPSS > 10%, OR CRITICAL + active threat, OR any CRITICAL severity.
This Week Schedule remediation this week. Criteria: HIGH severity (CVSS 7.0-8.9). Patch within normal change window.
This Month Plan within 30 days. Criteria: MEDIUM severity (CVSS 4.0-6.9), lower exploitation probability. Include in regular patch cycle.
Monitor Track and reassess. Criteria: LOW severity (CVSS 0.1-3.9), minimal exploitation risk. No immediate action needed.

Attack Technique

Denial of Service attacks render applications or systems unavailable by overwhelming resources or triggering failure conditions.

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy