octeontx2-af: Fix PF driver crash with kexec kernel booting
In the Linux kernel, the following vulnerability has been resolved: octeontx2-af: Fix PF driver crash with kexec kernel booting During a kexec reboot the hardware is not power-cycled, so AF state from the old kernel can persist into the new kernel. When AF and PF drivers are built as modules, the PF driver may probe before AF reinitializes the hardware. The PF driver treats the RVUM block revision as an indication that AF initialization is complete. If this value is left uncleared at shutdown, PF may incorrectly assume AF is ready and access stale hardware state, leading to a crash. Clear the RVUM block revision during AF shutdown to avoid PF mis-detecting AF readiness after kexec.
- Products
- Kernel
- Affected versions
- Not specified
- Fixed versions
- 5.10.252, 5.15.202, 6.1.165, 6.12.75, 6.18.14, 6.19.4, 6.6.128
- CVEs
- CVE-2026-46249
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 5 Nov 2026, 02:04 UTC · Revision 1
Source evidence
octeontx2-af: Fix PF driver crash with kexec kernel booting
core-osv · Original sourcePublished 3 Jun 2026, 15:49 UTC
In the Linux kernel, the following vulnerability has been resolved: octeontx2-af: Fix PF driver crash with kexec kernel booting During a kexec reboot the hardware is not power-cycled, so AF state from the old kernel can persist into the new kernel. When AF and PF drivers are built as modules, the PF driver may probe before AF reinitializes the hardware. The PF driver treats the RVUM block revision as an indication that AF initialization is complete. If this value is left uncleared at shutdown, PF may incorrectly assume AF is ready and access stale hardware state, leading to a crash. Clear the RVUM block revision during AF shutdown to avoid PF mis-detecting AF readiness after kexec.
osv:CVE-2026-46249
Kernel
Fixed versions: 5.10.252, 5.15.202, 6.1.165, 6.6.128, 6.12.75, 6.18.14, 6.19.4
Complete source record
{
"id": "3670747aca6279023c35ef04aac47c17fc15f06f362824030bd3a6adef9a1181",
"url": "https://osv.dev/vulnerability/CVE-2026-46249",
"method": "structured",
"payload": {
"kind": "advisory",
"title": "octeontx2-af: Fix PF driver crash with kexec kernel booting",
"summary": "In the Linux kernel, the following vulnerability has been resolved: octeontx2-af: Fix PF driver crash with kexec kernel booting During a kexec reboot the hardware is not power-cycled, so AF state from the old kernel can persist into the new kernel. When AF and PF drivers are built as modules, the PF driver may probe before AF reinitializes the hardware. The PF driver treats the RVUM block revision as an indication that AF initialization is complete. If this value is left uncleared at shutdown, PF may incorrectly assume AF is ready and access stale hardware state, leading to a crash. Clear the RVUM block revision during AF shutdown to avoid PF mis-detecting AF readiness after kexec.",
"evidence": "osv:CVE-2026-46249",
"products": [
{
"name": {
"value": "Kernel",
"evidence": "/affected/1/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "5.10.252",
"evidence": "/affected/1/ranges"
},
{
"value": "5.15.202",
"evidence": "/affected/1/ranges"
},
{
"value": "6.1.165",
"evidence": "/affected/1/ranges"
},
{
"value": "6.6.128",
"evidence": "/affected/1/ranges"
},
{
"value": "6.12.75",
"evidence": "/affected/1/ranges"
},
{
"value": "6.18.14",
"evidence": "/affected/1/ranges"
},
{
"value": "6.19.4",
"evidence": "/affected/1/ranges"
}
],
"affected_versions": []
}
],
"severity": "unknown",
"structured": {
"id": "CVE-2026-46249",
"aliases": [
"CVE-2026-46249"
],
"affected": [
{
"ranges": [
{
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"type": "GIT",
"events": [
{
"introduced": "54494aa5d1e68945dc79feb7c8461cd382e11d8a"
},
{
"fixed": "b7605b9301abc18fbbf2b0e23fdd281fc768955d"
},
{
"fixed": "9769a09afda20a006b528b9e723effcae45965b2"
},
{
"fixed": "57821d1436ba1c6a6973aa32d54166fdec35558c"
},
{
"fixed": "8b5ed7c5417b7013d35b6f2507dab739013ba1a9"
},
{
"fixed": "7d56ba306e93d04696718963fb4cda2883ee7585"
},
{
"fixed": "9c3398e5b3a914b74276d44ab54c49123b89c61a"
},
{
"fixed": "1370736836a18b5e0cd74bcc9cffe11d21f1fe79"
},
{
"fixed": "2d2d574309e3ae84ee794869a5da8b4c38753a94"
}
]
}
],
"database_specific": {
"source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-46249.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "4.20.0"
},
{
"fixed": "5.10.252"
}
]
},
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "5.11.0"
},
{
"fixed": "5.15.202"
}
]
},
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "5.16.0"
},
{
"fixed": "6.1.165"
}
]
},
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "6.2.0"
},
{
"fixed": "6.6.128"
}
]
},
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "6.7.0"
},
{
"fixed": "6.12.75"
}
]
},
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "6.13.0"
},
{
"fixed": "6.18.14"
}
]
},
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "6.19.0"
},
{
"fixed": "6.19.4"
}
]
}
],
"package": {
"name": "Kernel",
"ecosystem": "Linux"
},
"database_specific": {
"source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-46249.json"
}
}
],
"modified": "2026-10-28T02:30:41.884722099Z",
"provider": "osv",
"references": [
"https://git.kernel.org/stable/c/1370736836a18b5e0cd74bcc9cffe11d21f1fe79",
"https://git.kernel.org/stable/c/2d2d574309e3ae84ee794869a5da8b4c38753a94",
"https://git.kernel.org/stable/c/57821d1436ba1c6a6973aa32d54166fdec35558c",
"https://git.kernel.org/stable/c/7d56ba306e93d04696718963fb4cda2883ee7585",
"https://git.kernel.org/stable/c/8b5ed7c5417b7013d35b6f2507dab739013ba1a9",
"https://git.kernel.org/stable/c/9769a09afda20a006b528b9e723effcae45965b2",
"https://git.kernel.org/stable/c/9c3398e5b3a914b74276d44ab54c49123b89c61a",
"https://git.kernel.org/stable/c/b7605b9301abc18fbbf2b0e23fdd281fc768955d",
"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/46xxx/CVE-2026-46249.json",
"https://nvd.nist.gov/vuln/detail/CVE-2026-46249",
"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git"
],
"provider_metadata": {
"cna_assigner": "Linux",
"osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/46xxx/CVE-2026-46249.json"
}
},
"related_cves": [
{
"value": "CVE-2026-46249",
"evidence": "/id"
}
],
"security_relevant": true,
"severity_evidence": null
},
"source_id": "core-osv",
"document_id": 509316,
"published_at": "2026-06-03T15:49:45.252+00:00"
}