CVE Explorer

CVE-2026-64225

In the Linux kernel, the following vulnerability has been resolved: octeontx2-af: CGX: add bounds check to cgx_speed_mbps index cgx_speed_mbps has 13 elements but RESP_LINKSTAT_SPEED can yield values 0-15. If it returns a value >= 13, this causes an out-of-bounds array access. Add a bounds check and default to speed 0 if the index is out of range.

Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:6413d822876a5e1a69323a27ed3dbc8c4adb1056cbf8f0f284687cb4d8fc167e

Known exploited

Not asserted

Disputed

Stale source

Conflicts

Preserved source conflicts

No provider value was silently selected as the winner.

affected · 2 assertions

{"defaultStatus":"unaffected","product":"Linux","programFiles":["drivers/net/ethernet/marvell/octeontx2/af/cgx.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"94071141f00bc414e8f8f7f5db3b5143d535299f","status":"affected","version":"61071a871ea6eb2125ece91c1a0dbb124a318c8a","versionType":"git"},{"lessThan":"985b5e38ac4f4d5ff03c8bfd8484353b440a1579","status":"affected","version":"61071a871ea6eb2125ece91c1a0dbb124a318c8a","versionType":"git"},{"lessThan":"93d3dc81098cd60fb74d434ba7985ddfd9de5acb","status":"affected","version"…

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:94860b890a06f2f827a632a2ff6efbe8e5adb9ef7ebdd7de3adf5a28e9fb0aff · sha256:ecaf07b7dc48a26c… · /containers/cna/affected/0

{"defaultStatus":"affected","product":"Linux","programFiles":["drivers/net/ethernet/marvell/octeontx2/af/cgx.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"4.20"},{"lessThan":"4.20","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.10.*","status":"unaffected","version":"5.10.259","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.210","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.176","versio…

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:94860b890a06f2f827a632a2ff6efbe8e5adb9ef7ebdd7de3adf5a28e9fb0aff · sha256:ecaf07b7dc48a26c… · /containers/cna/affected/1

Affected products and versions

2 source assertions

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:94860b890a06f2f827a632a2ff6efbe8e5adb9ef7ebdd7de3adf5a28e9fb0aff · sha256:ecaf07b7dc48a26c… · /containers/cna/affected/0

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:94860b890a06f2f827a632a2ff6efbe8e5adb9ef7ebdd7de3adf5a28e9fb0aff · sha256:ecaf07b7dc48a26c… · /containers/cna/affected/1

Source references

8 source assertions

{"url":"https://git.kernel.org/stable/c/2c3d26b4a62454945ba9ef3af3174d3e40e7afef"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:94860b890a06f2f827a632a2ff6efbe8e5adb9ef7ebdd7de3adf5a28e9fb0aff · sha256:ecaf07b7dc48a26c… · /containers/cna/references/6

{"url":"https://git.kernel.org/stable/c/47a4cf2229be379cf88f92e32e1240337cd6273f"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:94860b890a06f2f827a632a2ff6efbe8e5adb9ef7ebdd7de3adf5a28e9fb0aff · sha256:ecaf07b7dc48a26c… · /containers/cna/references/5

{"url":"https://git.kernel.org/stable/c/8201bf45cc7c1c1a09290c4db8ab1e19801f8fec"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:94860b890a06f2f827a632a2ff6efbe8e5adb9ef7ebdd7de3adf5a28e9fb0aff · sha256:ecaf07b7dc48a26c… · /containers/cna/references/4

{"url":"https://git.kernel.org/stable/c/93d3dc81098cd60fb74d434ba7985ddfd9de5acb"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:94860b890a06f2f827a632a2ff6efbe8e5adb9ef7ebdd7de3adf5a28e9fb0aff · sha256:ecaf07b7dc48a26c… · /containers/cna/references/2

{"url":"https://git.kernel.org/stable/c/94071141f00bc414e8f8f7f5db3b5143d535299f"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:94860b890a06f2f827a632a2ff6efbe8e5adb9ef7ebdd7de3adf5a28e9fb0aff · sha256:ecaf07b7dc48a26c… · /containers/cna/references/0

{"url":"https://git.kernel.org/stable/c/985b5e38ac4f4d5ff03c8bfd8484353b440a1579"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:94860b890a06f2f827a632a2ff6efbe8e5adb9ef7ebdd7de3adf5a28e9fb0aff · sha256:ecaf07b7dc48a26c… · /containers/cna/references/1

{"url":"https://git.kernel.org/stable/c/c0bf0a4f3f1f5f57aa83e1400ba4f56f0abfd542"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:94860b890a06f2f827a632a2ff6efbe8e5adb9ef7ebdd7de3adf5a28e9fb0aff · sha256:ecaf07b7dc48a26c… · /containers/cna/references/7

{"url":"https://git.kernel.org/stable/c/e043017ac429caee73bd30c5a725659f1a3a4568"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:94860b890a06f2f827a632a2ff6efbe8e5adb9ef7ebdd7de3adf5a28e9fb0aff · sha256:ecaf07b7dc48a26c… · /containers/cna/references/3

Attribution and limitations

CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer