CVE-2026-97411
Last modified
CVE-2026-97411 is a vulnerability of currently unknown severity. In the Linux kernel, the following vulnerability has been resolved: net: ibm: emac: mal: fix potential system hang in mal_remove() napi_disable() is not idempotent and calling it on an already-disabled or unenabled NAPI context will cause the kernel to spin indefinitely waiting for the NAPI_STATE_SCHED bit to clear. In mal_remove(), napi_disable() is called unconditionally. If no MACs were registered, NAPI was never enabled.
Description
In the Linux kernel, the following vulnerability has been resolved: net: ibm: emac: mal: fix potential system hang in mal_remove() napi_disable() is not idempotent and calling it on an already-disabled or unenabled NAPI context will cause the kernel to spin indefinitely waiting for the NAPI_STATE_SCHED bit to clear. In mal_remove(), napi_disable() is called unconditionally. If no MACs were registered, NAPI was never enabled. Also, if they were registered but subsequently unregistered, NAPI was already disabled in mal_unregister_commac(). In either case, calling napi_disable() causes the kernel to hang upon module removal. Fix this by only calling napi_disable() in mal_remove() if the commac list is not empty (which implies NAPI is enabled).
Affected Software
Source: CNA advisory (CVE.org). NVD analysis pending.
| Vendor | Product | Versions |
|---|---|---|
| Linux | Linux | >= b3e441c6ed8655a42e7b4da1b6dc7939f259d9c9, < f6c1aad9b35fa083f48ce0c5926204891d82e089; >= b3e441c6ed8655a42e7b4da1b6dc7939f259d9c9, < c4cb9a728df66c46067b26263f5beb633aae4087; >= b3e441c6ed8655a42e7b4da1b6dc7939f259d9c9, < 7c5d41f87f079990bf241359e3c1332d8d10fe87 |
| Linux | Linux | 2.6.24 |
References
Timeline
- Published
- Last Modified
- Status
- Received
Frequently Asked Questions
What is CVE-2026-97411?
How severe is CVE-2026-97411?
How do I fix CVE-2026-97411?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2026
- CVE-2026-97404In OpenStack Zaqar before 22.0.2, WSGI transport mishandles …9.2
- CVE-2026-97407In the Linux kernel, the following vulnerability has been re…
- CVE-2026-97408In the Linux kernel, the following vulnerability has been re…
- CVE-2026-97409In the Linux kernel, the following vulnerability has been re…8.8
- CVE-2026-9741A bug in query analysis processing of the $vectorSearch aggr…7.1
- CVE-2026-97410In the Linux kernel, the following vulnerability has been re…
- CVE-2026-97412In the Linux kernel, the following vulnerability has been re…
- CVE-2026-97413In the Linux kernel, the following vulnerability has been re…9.8
- CVE-2026-97414In the Linux kernel, the following vulnerability has been re…
- CVE-2026-97415In the Linux kernel, the following vulnerability has been re…7.8
- CVE-2026-97416In the Linux kernel, the following vulnerability has been re…
- CVE-2026-97417In the Linux kernel, the following vulnerability has been re…7.5
Are you affected by CVE-2026-97411?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST
