CVE-2026-93278

CVE-2026-93278

published September 24, 2026

CVSS
—
EPSS
0%
Percentile
8.4
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

staging: octeon: add missing napi_disable in cvm_oct_rx_shutdown

cvm_oct_rx_shutdown calls free_irq and netif_napi_del without

disabling the napi instance first. As the free_irq only waits

for completion of hard interrupt handlers, the napi poll

function could still be active. If cvm_oct_remove proceeds to

free the plat structure (which holds the NAPI instances), the

active poll function will access freed memory, resulting in a

use-after-free crash.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00192 · 8.4th percentile
Published
2026-09-24T20:17Z
References (7)
EPSS history
Timeline
  • 26 SEP 03:27Z
    EPSS moved — → 0%
    epss
  • 24 SEP 15:52Z
    staging: octeon: add missing napi_disable in cvm_oct_rx_shutdown
    cvelistv5