ocelot driver

About this tag
The ocelot driver tag on WindowsForum.com covers discussions about the MSCC Ocelot networking driver in the Linux kernel, including security vulnerabilities and fixes. Recent threads address CVE-2026-22982, a NULL pointer dereference crash in the ocelot driver's Link Aggregation Group logic, and CVE-2025-40003, a use-after-free defect in the driver's workqueue handling. These topics are relevant to Linux kernel stability and security, with references to Microsoft's Azure Linux and VEX CSAF attestations. The tag is useful for users interested in Linux kernel driver issues, particularly those involving MSCC/Marvell switch hardware and related CVEs.
  1. Linux Kernel Fix: MSCC Ocelot NULL Pointer Crash in LAG

    The Linux kernel received a targeted fix for a crash in the MSCC Ocelot driver that could be triggered when adding an interface to a Link Aggregation Group (LAG), tracked as CVE-2026-22982 — a local, denial-of-service vulnerability rooted in a NULL pointer dereference in the ocelot driver's...
  2. Azure Linux CVE-2025-40003: Understanding VEX CSAF Attestations and Microsoft Artifacts

    Microsoft’s concise attestation that “Azure Linux includes this open‑source library and is therefore potentially affected” is accurate — but it is a scoped inventory statement, not proof that no other Microsoft product can or does contain the same vulnerable kernel code. Background / Overview...