{"id":"CVE-2026-98806","summary":"octeontx2-pf: Fix aura BPID assignment when CONFIG_DCB is enabled","details":"In the Linux kernel, the following vulnerability has been resolved:\n\nocteontx2-pf: Fix aura BPID assignment when CONFIG_DCB is enabled\n\nPreviously, BPID assignment under CONFIG_DCB assumed\n`queue_to_pfc_map` was always initialized. For SDP VFs this leads to\ninvalid memory access as it was not initialized.\n\nThis patch adds a NULL check for `queue_to_pfc_map` before\ndereferencing it. Also, simplifies the logic by always assigning a\ndefault BPID first, then conditionally overriding it if CONFIG_DCB is\nenabled and the map exists.","modified":"2026-10-20T02:30:17.961470290Z","published":"2026-10-18T15:48:52.707Z","database_specific":{"cna_assigner":"Linux","osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/98xxx/CVE-2026-98806.json"},"references":[{"type":"PACKAGE","url":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git"},{"type":"WEB","url":"https://git.kernel.org/stable/c/056994563935e049093f100efaad7e63ad113814"},{"type":"WEB","url":"https://git.kernel.org/stable/c/59fbbded05e559675930fd521b8d62b72828b52d"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/98xxx/CVE-2026-98806.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-98806"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","events":[{"introduced":"184fb40f731bd3353b0887731f7caba66609e9cd"},{"fixed":"59fbbded05e559675930fd521b8d62b72828b52d"},{"fixed":"056994563935e049093f100efaad7e63ad113814"}]},{"type":"GIT","repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","events":[{"introduced":"6.14.9"},{"fixed":"6.15"}]},{"type":"GIT","repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","events":[{"introduced":"22079d5ae4a33679150f7de89f4107f4e0446886"}]}],"versions":["v6.14.11","v6.14.10","v6.14.9"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-98806.json"}},{"package":{"name":"Kernel","ecosystem":"Linux"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.15.0"},{"fixed":"7.2.10"}]}],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-98806.json"}}],"schema_version":"1.9.0"}