CVE-2026-93278

/// Technical description

In the Linux kernel, the following vulnerability has been resolved:

staging: octeon: add missing napi_disable in cvm_oct_rx_shutdown

cvm_oct_rx_shutdown calls free_irq and netif_napi_del without

disabling the napi instance first. As the free_irq only waits

for completion of hard interrupt handlers, the napi poll

function could still be active. If cvm_oct_remove proceeds to

free the plat structure (which holds the NAPI instances), the

active poll function will access freed memory, resulting in a

use-after-free crash.

/// Remediation

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

/// References