CVE-2026-93279
Published Sep 24, 2026
Description
In the Linux kernel, the following vulnerability has been resolved: staging: octeon: add missing tasklet_kill in cvm_oct_tx_shutdown The TX cleanup tasklet can be scheduled by the watchdog IRQ handler to execute cvm_oct_tx_do_cleanup. There can be a pending tasklet in the queue which might run after the cvm_oct_remove() frees net_device structures, causing a use-after-free in cvm_oct_tx_do_cleanup() as it iterates cvm_oct_device[] which is an array of netdevice pointers. Add tasklet_kill() after free_irq() to ensure the tasklet is no longer scheduled or running before teardown proceeds.
Is your site exposed to CVE-2026-93279?
Run a free security scan — no signup, results in seconds.
References
Other References
https://git.kernel.org/stable/c/03d12490afd1198310ad0aba42462329832eb739
https://git.kernel.org/stable/c/2c0c9956596e48654bb4855e2a0742748a0826a7
https://git.kernel.org/stable/c/32efcb6d5f4e3f030e7b0a3ba5c6c0684dd07486
https://git.kernel.org/stable/c/41a79bd9e5a74f8f483b3b206d10567912874fb4
https://git.kernel.org/stable/c/a77efd85e0d48c877f66d2bc3ab89cc1b8dacd19
https://git.kernel.org/stable/c/b6365e4186322858a82c8713b1d0bd209c8e765a
https://git.kernel.org/stable/c/b9af44b0d20b2247c4eb0ea5cfca907d643eea50
https://git.kernel.org/stable/c/d15226338dfaa84ffff142d32723cdf74d0c47c4
Frequently Asked Questions
What is CVE-2026-93279? +
In the Linux kernel, the following vulnerability has been resolved:
staging: octeon: add missing tasklet_kill in cvm_oct_tx_shutdown
The TX cleanup tasklet can be scheduled by the watchdog IRQ handler
to execute cvm_oct_tx_do_cleanup. There can be a pending tasklet in
the queue which might run after the cvm_oct_remove() frees net_device
structures, causing a use-after-free in cvm_oct_tx_do_cleanup() as it
iterates cvm_oct_device[] which is an array of netdevice pointers.
Add tasklet_kill() after free_irq() to ensure the tasklet is no longer
scheduled or running before teardown proceeds.
How do I check if I'm vulnerable to CVE-2026-93279? +
You can use Secably's free Website Scanner to check your website for known vulnerabilities. For infrastructure scanning, use the Port Scanner to identify exposed services that may be affected. Check the vendor advisories linked above for specific patch and version information.