THREATOPS

THREAT OPS › Threat News › [NVD] CVE-2026-63923 (HIGH 8.8) — In the Linux kernel, the following vulnerability has been resolved: octeontx2-af: validate body pcifunc in rvu_mbox_handler_rep_event_notify rvu_mbox_handler_rep_event_notify() in drivers/net/ethernet/marvell/ octeontx2/af/rvu_rep.c queues a sender-controlled REP_EVENT_NOTIFY r

[NVD] CVE-2026-63923 (HIGH 8.8) — In the Linux kernel, the following vulnerability has been resolved: octeontx2-af: validate body pcifunc in rvu_mbox_handler_rep_event_notify rvu_mbox_handler_rep_event_notify() in drivers/net/ethernet/marvell/ octeontx2/af/rvu_rep.c queues a sender-controlled REP_EVENT_NOTIFY r

mednvdPublished 2026-07-19

CVE-2026-63923 CVSS: 8.8 HIGH Published: 2026-07-19T16:17:10.560

In the Linux kernel, the following vulnerability has been resolved:

octeontx2-af: validate body pcifunc in rvu_mbox_handler_rep_event_notify

rvu_mbox_handler_rep_event_notify() in drivers/net/ethernet/marvell/ octeontx2/af/rvu_rep.c queues a sender-controlled REP_EVENT_NOTIFY request body verbatim, and rvu_rep_up_notify() then for

Indicators of compromise

CVE-2026-63923cve

Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-63923