CVE-2026-90084 octeontx2-vf: fix workqueue and netdev race in probe/remove
A race condition in the octeontx2-vf driver can cause a kernel crash during device probe or removal, leading to denial of service.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2026-90084?
CVE-2026-90084 is a vulnerability in Linux, published on 17 Sep 2026. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
In the Linux kernel, the following vulnerability has been resolved:
octeontx2-vf: fix workqueue and netdev race in probe/remove
Initialize the VF workqueue before register_netdev() so ndo_set_rx_mode does not queue work on a NULL workqueue. Unregister the netdev before destroying the workqueue, and add proper probe error cleanup.
Which versions are affected by CVE-2026-90084?
How do I fix CVE-2026-90084?
Apply the vendor's patch.
Is CVE-2026-90084 being exploited?
There is no known exploitation of CVE-2026-90084 in the wild and no public exploit code.
Sources
Also known as AZL-102960, BELL-CVE-2026-90084, DEBIAN-CVE-2026-90084, GHSA-8f7f-fc8g-59c2, UBUNTU-CVE-2026-90084.