CVE-2026-98494
Last modified
CVE-2026-98494 is a vulnerability of currently unknown severity. In the Linux kernel, the following vulnerability has been resolved: net: atl1: fix soft lockup on out-of-range cmb_tpd_next_to_clean read Same issue as atl1c (see the first commit in this series, "net: atl1c: fix soft lockup on out-of-range tpd_cons read"): the hardware can report an out-of-range cmb_tpd_next_to_clean (seen as 0xffff) while the PCIe link/MAC is resetting. An out-of-range value can never be reached and the loop below would spin forever.
Description
In the Linux kernel, the following vulnerability has been resolved: net: atl1: fix soft lockup on out-of-range cmb_tpd_next_to_clean read Same issue as atl1c (see the first commit in this series, "net: atl1c: fix soft lockup on out-of-range tpd_cons read"): the hardware can report an out-of-range cmb_tpd_next_to_clean (seen as 0xffff) while the PCIe link/MAC is resetting. An out-of-range value can never be reached and the loop below would spin forever. Treat it as "nothing new to clean" instead.
Affected Software
Source: CNA advisory (CVE.org). NVD analysis pending.
| Vendor | Product | Versions |
|---|---|---|
| Linux | Linux | >= f3cc28c797604fa1cda4aef3f250f465de54a0ca, < 5d7ac337d37cb97d77e4c910d37746694b606661; >= f3cc28c797604fa1cda4aef3f250f465de54a0ca, < c55e51d5899e80f9593b26985ed0b89e0c828a5e; >= f3cc28c797604fa1cda4aef3f250f465de54a0ca, < 6ab9f61ca851f02ae4398cebaf00735a22e1d6ca; >= f3cc28c797604fa1cda4aef3f250f465de54a0ca, < 632cd7b81cb7bab36112f02eb2ee7f7cc1214fb1; >= f3cc28c797604fa1cda4aef3f250f465de54a0ca, < 79e2447b11322c27ef9ac423be0a94efc7691f02; >= f3cc28c797604fa1cda4aef3f250f465de54a0ca, < 0f573b0576252d44fb27ab8470ea873bc6408ef3; >= f3cc28c797604fa1cda4aef3f250f465de54a0ca, < 6285919d4c06254d257d24dc980f6332e1984a82; >= f3cc28c797604fa1cda4aef3f250f465de54a0ca, < 43e746821f5f5afbbf68e388bf9fbe221e03bfca |
| Linux | Linux | 2.6.21 |
References
Timeline
- Published
- Last Modified
- Status
- Received
Frequently Asked Questions
What is CVE-2026-98494?
How severe is CVE-2026-98494?
How do I fix CVE-2026-98494?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2026
- CVE-2026-98488In the Linux kernel, the following vulnerability has been re…
- CVE-2026-98489In the Linux kernel, the following vulnerability has been re…
- CVE-2026-98490In the Linux kernel, the following vulnerability has been re…9.8
- CVE-2026-98491In the Linux kernel, the following vulnerability has been re…7.8
- CVE-2026-98492In the Linux kernel, the following vulnerability has been re…
- CVE-2026-98493In the Linux kernel, the following vulnerability has been re…
- CVE-2026-98495In the Linux kernel, the following vulnerability has been re…
- CVE-2026-98496In the Linux kernel, the following vulnerability has been re…
- CVE-2026-98497In the Linux kernel, the following vulnerability has been re…7.5
- CVE-2026-98498In the Linux kernel, the following vulnerability has been re…
- CVE-2026-98499In the Linux kernel, the following vulnerability has been re…8.1
- CVE-2026-98500In the Linux kernel, the following vulnerability has been re…
Are you affected by CVE-2026-98494?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST