CVE-2026-74309

CriticalCVSS 10.0

Published: 15/08/2026(UTC)Updated: 17/08/2026(UTC)Translated: 15/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.17%

6th percentile - higher than 6% of all known CVEs

Summary

In the Linux kernel, the vdpa/octeon_ep driver's interrupt handler looks up the IRQ index in oct_hw->irqs instead of assuming irq - irqs[0]. The fix supports non-contiguous IRQ numbers and avoids incorrect ring indexing.

Risk Assessment

The vulnerability may lead to incorrect IRQ-to-ring mapping, potentially causing device malfunction or system crash.

Recommendation

Install the Linux kernel patch that changes the IRQ index lookup to use oct_hw->irqs array, correctly handling non-contiguous IRQ numbers.

Original NVD description (English source)

In the Linux kernel, the following vulnerability has been resolved: vdpa/octeon_ep: fix IRQ-to-ring mapping in interrupt handler Look up the IRQ index in oct_hw->irqs instead of assuming irq - irqs[0]. This supports non-contiguous IRQ numbers and avoids incorrect ring indexing when irqs[0] is not the base.