Out-of-Bounds Array Access in Linux Kernel Affecting OcteonTX2

CVE-2026-64225

What is CVE-2026-64225?

An out-of-bounds array access vulnerability exists in the Linux kernel's OcteonTX2 hardware drivers. Specifically, the cgx_speed_mbps array, which contains 13 elements, may be indexed by RESP_LINKSTAT_SPEED that can return values between 0 and 15. Should it return an index of 13 or higher, it results in an out-of-bounds access, potentially leading to undefined behavior. A corrective bounds check has now been added to prevent such scenarios, defaulting to a speed of 0 for any out-of-range index.

References