CVE-2026-74309 vdpa/octeon_ep: fix IRQ-to-ring mapping in interrupt handler
Incorrect IRQ-to-ring mapping in the Octeon EP vDPA driver can cause incorrect ring indexing, potentially leading to system instability or denial of service.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2026-74309?
CVE-2026-74309 is a critical vulnerability in Linux, published on 15 Aug 2026. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
In the Linux kernel, the following vulnerability has been resolved:
vdpa/octeon_ep: fix IRQ-to-ring mapping in interrupt handler
Look up the IRQ index in oct_hw->irqs instead of assuming irq - irqs[0]. This supports non-contiguous IRQ numbers and avoids incorrect ring indexing when irqs[0] is not the base.
Which versions are affected by CVE-2026-74309?
How do I fix CVE-2026-74309?
Apply the vendor's patch.
Is CVE-2026-74309 being exploited?
There is no known exploitation of CVE-2026-74309 in the wild and no public exploit code.
Sources
Also known as BELL-CVE-2026-74309, DEBIAN-CVE-2026-74309, GHSA-mxhm-35m8-cqc9, UBUNTU-CVE-2026-74309.