CVE-2026-93278
staging: octeon: add missing napi_disable in cvm_oct_rx_shutdown
Published: Sep 24, 2026Updated: Sep 24, 2026 Sources: CVE List
Description
In the Linux kernel, the following vulnerability has been resolved: staging: octeon: add missing napi_disable in cvm_oct_rx_shutdown cvm_oct_rx_shutdown calls free_irq and netif_napi_del without disabling the napi instance first. As the free_irq only waits for completion of hard interrupt handlers, the napi poll function could still be active. If cvm_oct_remove proceeds to free the plat structure (which holds the NAPI instances), the active poll function will access freed memory, resulting in a use-after-free crash.
No summary for this CVE yet.
Affected Products
Linux
oss-projectaka the linux kernel
Exploitability
No known exploits, KEV entries, or remediation guidance available for this vulnerability yet.
References
https://git.kernel.org/stable/c/158389d7af04bbf0664d91c2ce31fcc9eeace1eb
git.kernel.org
https://git.kernel.org/stable/c/c124049c3a7006fd6caf629139a5722610bbffb4
git.kernel.org
https://git.kernel.org/stable/c/98f9036b2254c928cb44da0c77dba38f66f7d8f1
git.kernel.org
and 4 more references View all →
Unlock Complete Vulnerability Intelligence
Get the full picture for CVE-2026-93278 and every CVE in our database. Create a free account — no credit card required.
Create Free AccountPlain-language analysis
Impact assessment and exploitation scenario in plain English
Attack graph visualization
Interactive attack path and kill chain mapping
Exploit details & PoC links
ExploitDB, Metasploit, GitHub PoCs with direct links
Nuclei scanner templates
Ready-to-use vulnerability scanner templates
Full remediation guide
Patch instructions, workarounds, and compliance impact
Interactive AI chat
Ask questions about this vulnerability in natural language
Related vulnerabilities
Semantically similar CVEs and attack patterns
REST API & MCP access
Integrate vulnerability data into your workflows