Critical Alert 1 Active Exploit Detected Today

CVE-2026-7273 Zyxel GS1900 Series Switches Stack-Based Buffer Overflow Vulnerability →
Powered by CVE Watchtower
×

CVE Watchtower

← Back to CVE List

CVE-2026-90080NVD

Vulnerability Summary

In the Linux kernel, the following vulnerability has been resolved:

octeontx2-pf: fix NULL deref of af_xdp_zc_qidx on rep setup

af_xdp_zc_qidx tracks receive queues using AF_XDP zero-copy and is
allocated during PF/VF probe. Representors and other non-AF_XDP paths
leave the pointer NULL, but several call sites used test_bit() on it
unconditionally.

Switching to devlink eswitch mode creates representors and runs
otx2_init_hw_resources(), which reaches otx2_pool_aq_init() and oopses
when dereferencing the NULL bitmap. Add NULL checks before every
af_xdp_zc_qidx test_bit() use in the RSS, ethtool, XSK, and pool init
paths.
Severity Level
UNKNOWN
Published Date
Sep 17, 2026
Last Modified
Sep 17, 2026
Exploitation Status
No confirmed exploitation yet
EPSS Score (30-Day)
0.20%Probability
Root Weakness (CWE)
N/A

Affected & Patched Versions

Affected Versions
  • Linux Linux >= efabce29015189cb5cd8066cf29eb1d754de6c3c and < b003d5b4e46ca5033859db601e12d36da24d0e40
  • Linux Linux >= efabce29015189cb5cd8066cf29eb1d754de6c3c and < 7e33c6bd049b532d2ec4916895ef07e538bed905
  • Linux Linux >= efabce29015189cb5cd8066cf29eb1d754de6c3c and < b09a0503c755b6609fad59a84cc7f05b6843a03c
  • Linux Linux >= 9bd7273cf1f9c5761d696cca821d25602e8f7009
  • Linux Linux >= 6.14.9 and < 6.15
  • Linux Linux >= 6.15
Patched Versions
  • Linux Linux b003d5b4e46ca5033859db601e12d36da24d0e40
  • Linux Linux 7e33c6bd049b532d2ec4916895ef07e538bed905
  • Linux Linux b09a0503c755b6609fad59a84cc7f05b6843a03c
  • Linux Linux 6.15
📧Email Delivery — Threat intel straight to your inbox.
♾️Unlimited Vendors — Track your entire stack.
🚨All New CVEs — Be the first to know.
⚙️Custom EPSS — Filter noise, focus on risk.
💬Webhooks — Slack & Teams integration.
🚫Ad-Free — Uninterrupted experience.
📧Email Delivery — Threat intel straight to your inbox.
♾️Unlimited Vendors — Track your entire stack.
🚨All New CVEs — Be the first to know.
⚙️Custom EPSS — Filter noise, focus on risk.
💬Webhooks — Slack & Teams integration.
🚫Ad-Free — Uninterrupted experience.