CVE-2026-46188

octeon_ep_vf: add NULL check for napi_build_skb()

published May 28, 2026

CVSS
—
EPSS
0%
Percentile
5.0
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

octeon_ep_vf: add NULL check for napi_build_skb()

napi_build_skb() can return NULL on allocation failure. In

__octep_vf_oq_process_rx(), the result is used directly without a NULL

check in both the single-buffer and multi-fragment paths, leading to a

NULL pointer dereference.

Add NULL checks after both napi_build_skb() calls, properly advancing

descriptors and consuming remaining fragments on failure.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00162 · 5.0th percentile
Published
2026-05-28T09:36Z
EPSS history
Timeline
  • 28 MAY 09:36Z
    octeon_ep_vf: add NULL check for napi_build_skb()
    cvelistv5