CVE-2026-97966

In the Linux kernel, the following vulnerability has been resolved:

octeontx2-pf: reset HTB scheduler topology before freeing queues

HTB offload programs NIX_AF_TLxX_TOPOLOGY on QoS-allocated scheduler

queues via otx2_qos_txschq_set_parent_topology(), but teardown freed

those queues without clearing TOPOLOGY. The AF only restores PARENT and

SCHEDULE on free, so PRIO_ANCHOR/RR_PRIO settings can survive in the

shared scheduler pool and affect later allocations.

Add otx2_qos_reset_schq_topology() and otx2_qos_free_hw_schq() to zero

TL4 through TL2 TOPOLOGY before each schq is returned to the AF during

hierarchy teardown and cfg rollback. Skip the aggregation level (TL1):

it is a per-tx-link queue shared by the PF, default Tx hierarchy and VFs,

and is not freed back to the AF by nix_txschq_free_one().