CVE-2026-97966 Linux CVE debrief

Who should care

Defenders responsible for Linux kernel and otceontx2-pf driver configurations should assess exposure and prioritize verification. This includes operators, platform administrators, vulnerability management teams, and security teams who manage Linux kernel versions and otceontx2-pf driver configurations.

Why it matters

Defenders should assess exposure and prioritize verification of Linux kernel versions and otceontx2-pf driver configurations due to a resolved vulnerability involving HTB scheduler topology and queue freeing.

• Verification of Linux kernel versions and otceontx2-pf driver configurations is necessary to ensure proper scheduler topology and queue freeing
• Exposure to potential scheduler pool corruption and incorrect PRIO_ANCHOR/RR_PRIO settings

Technical summary

The Linux kernel vulnerability involves the HTB scheduler topology not being properly reset before freeing queues in the otceontx2-pf driver. This can lead to PRIO_ANCHOR/RR_PRIO settings surviving in the shared scheduler pool and affecting later allocations. The vulnerability has been resolved through the addition of otx2_qos_reset_schq_topology() and otx2_qos_free_hw_schq() to zero TL4 through TL2 TOPOLOGY before each schq is returned to the AF during hierarchy teardown and cfg rollback. Defenders should assess exposure and prioritize verification of Linux kernel versions and otceontx2-pf driver configurations.

Defensive priority

Defenders should assess exposure and prioritize verification of Linux kernel versions and otceontx2-pf driver configurations.

Recommended defensive actions

• Assess exposure by verifying Linux kernel versions and otceontx2-pf driver configurations
• Prioritize verification of scheduler topology and queue freeing in otceontx2-pf driver
• Review and apply patches or updates for the Linux kernel and otceontx2-pf driver
• Confirm whether affected product deployments exist in managed environments and assign an owner for follow-up
• Review compensating controls for exposed systems while remediation is scheduled and verified
• Check relevant monitoring, detection, and logs for exposed assets that need extra review
• Track exceptions, retest remediated assets, and close the item only after evidence is documented

Evidence notes

The CVE record and source references provide details on the vulnerability and its resolution in the Linux kernel. Evidence is limited to public CVE details and Linux kernel patch references. Defenders should verify Linux kernel versions and otceontx2-pf driver configurations for exposure. The vulnerability involves the HTB scheduler topology not being properly reset before freeing queues in the otceontx2-pf driver.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.