What’s Vulnerable › Vulnerabilities

CVE-2026-90084: octeontx2-vf: fix workqueue and netdev race in probe/remove

• Severity: unknown
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-09-17 · updated 2026-10-30

Description

In the Linux kernel, the following vulnerability has been resolved: octeontx2-vf: fix workqueue and netdev race in probe/remove Initialize the VF workqueue before register_netdev() so ndo_set_rx_mode does not queue work on a NULL workqueue. Unregister the netdev before destroying the workqueue, and add proper probe error cleanup.

Affected products

• Linux: 5.14 — fixed in 7.3

How to fix

Upgrade to a fixed version: Linux 7.3. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/00dda563f4963f28fab46d09b912d68268b8e7a5
• https://git.kernel.org/stable/c/3ba97ff4f873481d370bee7f7dfb87f8296af9be
• https://git.kernel.org/stable/c/42a139332ce81a907dac987f1494d30e0a8ab149
• https://git.kernel.org/stable/c/4a4b53231b77986ce55b38122174222c86416de7
• https://git.kernel.org/stable/c/bdc530baf079eee104f9ea5d83815e798ea155df
• https://git.kernel.org/stable/c/ef42c9e922dfa806576d9d82867da2f3cd76b3ca

Get alerted when CVE-2026-90084 or the next vulnerability affects your stack