Linux Kernel Vulnerability in OcteonTX2 and CN20K Products

CVE-2026-64222

What is CVE-2026-64222?

A vulnerability in the Linux kernel affects the OcteonTX2 and CN20K architectures, specifically within the handling of memory pools. The issue arises during error conditions in octeontx2-pf, where a double free of the pool->stack can occur if the allocation process fails. The otx2_pool_aq_init() function mistakenly does not nullify the pool->stack pointer after a free operation, leading to potential memory corruption when the cleanup function is invoked. This bug originated from an experimental analysis tool developed for detecting memory management problems, with confirmed presence in pre-release versions of the kernel. Resolution requires specific hardware conditions for validation.

References