Copyright © 2012 Red Hat, Inc. All rights reserved. Moderate 2026-07-24T00:00:00 kernel: octeontx2-af: CGX: add bounds check to cgx_speed_mbps index 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CWE-125

In the Linux kernel, the following vulnerability has been resolved: octeontx2-af: CGX: add bounds check to cgx_speed_mbps index cgx_speed_mbps has 13 elements but RESP_LINKSTAT_SPEED can yield values 0-15. If it returns a value >= 13, this causes an out-of-bounds array access. Add a bounds check and default to speed 0 if the index is out of range.

A flaw was found in the Linux kernel's `octeontx2-af: CGX` component. This vulnerability arises from an out-of-bounds array access. Specifically, the `RESP_LINKSTAT_SPEED` function can produce an index value that exceeds the allocated size of the `cgx_speed_mbps` array, leading to memory corruption. This could result in a system crash (Denial of Service).

A flaw was found in the Linux kernel octeontx2-af driver, in the CGX (Converged Gigabit Ethernet) firmware interface used by Marvell OcteonTX2 network adapters. The RESP_LINKSTAT_SPEED handling can produce a link speed index value that exceeds the bounds of the cgx_speed_mbps lookup array. Because this index is not validated before use, an unexpected firmware response can cause an out-of-bounds array access, leading to memory corruption and a kernel crash. This is classified as CWE-125 (Out-of-bounds Read) and results in a Denial of Service impact. Exploitation requires a system with an affected OcteonTX2 CGX-based network adapter present, consistent with the AV:L and PR:L values in the CVSS vector. There is no mitigation for this issue other than applying the fix. Systems that do not use OcteonTX2 CGX-based network hardware are not affected. Red Hat Enterprise Linux 10 Fix deferred kernel Red Hat Enterprise Linux 10 Fix deferred libkrun Red Hat Enterprise Linux 6 Not affected kernel Red Hat Enterprise Linux 7 Not affected kernel Red Hat Enterprise Linux 7 Not affected kernel-rt Red Hat Enterprise Linux 8 Not affected kernel Red Hat Enterprise Linux 8 Not affected kernel-rt Red Hat Enterprise Linux 9 Fix deferred kernel Red Hat Enterprise Linux 9 Fix deferred kernel-rt Red Hat Enterprise Linux for NVIDIA 26 Fix deferred kernel Red Hat Hardened Images Not affected erlang27 Red Hat OpenShift Container Platform 4 Fix deferred rhcos https://www.cve.org/CVERecord?id=CVE-2026-64225 https://nvd.nist.gov/vuln/detail/CVE-2026-64225 https://lore.kernel.org/linux-cve-announce/2026072417-CVE-2026-64225-a263@gregkh/T