CVE-2026-98488
Last modified
CVE-2026-98488 is a vulnerability of currently unknown severity. In the Linux kernel, the following vulnerability has been resolved: net: atl1e: fix soft lockup on out-of-range hw_next_to_clean read Same issue as atl1c (see the first commit in this series, "net: atl1c: fix soft lockup on out-of-range tpd_cons read"): the hardware can report an out-of-range hw_next_to_clean (seen as 0xffff) while the PCIe link/MAC is resetting. An out-of-range value can never be reached and the loop below would spin forever.
Description
In the Linux kernel, the following vulnerability has been resolved: net: atl1e: fix soft lockup on out-of-range hw_next_to_clean read Same issue as atl1c (see the first commit in this series, "net: atl1c: fix soft lockup on out-of-range tpd_cons read"): the hardware can report an out-of-range hw_next_to_clean (seen as 0xffff) while the PCIe link/MAC is resetting. An out-of-range value can never be reached and the loop below would spin forever. Treat it as "nothing new to clean" instead.
Affected Software
Source: CNA advisory (CVE.org). NVD analysis pending.
| Vendor | Product | Versions |
|---|---|---|
| Linux | Linux | >= a6a5325239c20202e18e21e94291bccc659fbf9e, < ca862b1a4af7eac19429ca7ab92625f94ff4a46c; >= a6a5325239c20202e18e21e94291bccc659fbf9e, < 4bbb44075bd3e773d61706882ab923ece8b3b519; >= a6a5325239c20202e18e21e94291bccc659fbf9e, < 34bc747a61bef572244b01b095552b629cd8d2a2; >= a6a5325239c20202e18e21e94291bccc659fbf9e, < 1d8c85359b5075c7937925b673add7ed00e57ec8; >= a6a5325239c20202e18e21e94291bccc659fbf9e, < a277422d194c62daa1b961f5f739689e53fe7301; >= a6a5325239c20202e18e21e94291bccc659fbf9e, < 4b7161804d8f31227551901f93947bb4eea4690b; >= a6a5325239c20202e18e21e94291bccc659fbf9e, < 3a7d9271b37c80fb7db04aff3bc5621cfdaf9bee; >= a6a5325239c20202e18e21e94291bccc659fbf9e, < 374bf9e4b90f979e052332c4faca2d745c491a12 |
| Linux | Linux | 2.6.27 |
References
Timeline
- Published
- Last Modified
- Status
- Received
Frequently Asked Questions
What is CVE-2026-98488?
How severe is CVE-2026-98488?
How do I fix CVE-2026-98488?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2026
- CVE-2026-98482In the Linux kernel, the following vulnerability has been re…
- CVE-2026-98483In the Linux kernel, the following vulnerability has been re…
- CVE-2026-98484In the Linux kernel, the following vulnerability has been re…
- CVE-2026-98485In the Linux kernel, the following vulnerability has been re…7.1
- CVE-2026-98486In the Linux kernel, the following vulnerability has been re…
- CVE-2026-98487In the Linux kernel, the following vulnerability has been re…7.8
- CVE-2026-98489In the Linux kernel, the following vulnerability has been re…
- CVE-2026-98490In the Linux kernel, the following vulnerability has been re…9.8
- CVE-2026-98491In the Linux kernel, the following vulnerability has been re…7.8
- CVE-2026-98492In the Linux kernel, the following vulnerability has been re…
- CVE-2026-98493In the Linux kernel, the following vulnerability has been re…
- CVE-2026-98494In the Linux kernel, the following vulnerability has been re…
Are you affected by CVE-2026-98488?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST