Strix
73.2K

CVE-2026-98594

Unknown

Last modified

CVE-2026-98594 is a vulnerability of currently unknown severity. In the Linux kernel, the following vulnerability has been resolved: tg3: clean up PHYLIB resources on probe failure tg3_get_invariants() can register an MDIO bus and connect a PHY for USE_PHYLIB devices. If tg3_init_one() later fails, its common error path releases the mappings and netdev without undoing those PHYLIB resources. Disconnect the PHY and unregister the MDIO bus before the remaining teardown.

Description

In the Linux kernel, the following vulnerability has been resolved: tg3: clean up PHYLIB resources on probe failure tg3_get_invariants() can register an MDIO bus and connect a PHY for USE_PHYLIB devices. If tg3_init_one() later fails, its common error path releases the mappings and netdev without undoing those PHYLIB resources. Disconnect the PHY and unregister the MDIO bus before the remaining teardown. Guard PHY cleanup with USE_PHYLIB to match tg3_phy_init(), and call tg3_mdio_fini() unconditionally to match tg3_mdio_init(). The existing IS_CONNECTED and MDIOBUS_INITED flags make both helpers safe when initialization only completed partially. This issue was identified during our ongoing static-analysis research while reviewing kernel code.

Affected Software

Source: CNA advisory (CVE.org). NVD analysis pending.

VendorProductVersions
LinuxLinux>= 158d7abdae85e9ac43d99780c372d79c119f7626, < ce86d6929d03e6b0abcb781dfa50f9f0816bff78; >= 158d7abdae85e9ac43d99780c372d79c119f7626, < a449eedb3b1eb5b8b1f5ed116a1bfe85eaaf81df; >= 158d7abdae85e9ac43d99780c372d79c119f7626, < 0844402326d4e48a28688f93ec6442e93bb442fa; >= 158d7abdae85e9ac43d99780c372d79c119f7626, < e766321288b507afb70d2bfef6ba443213329f79; >= 158d7abdae85e9ac43d99780c372d79c119f7626, < d2abb0013b933d59ee441185df0eca9e8c0b33eb; >= 158d7abdae85e9ac43d99780c372d79c119f7626, < 6515c41503eef849abd2c7364f34e4bb25110f90; >= 158d7abdae85e9ac43d99780c372d79c119f7626, < b6c0c757c65893ad7bb17e8bcf33cdd8257d7b3d; >= 158d7abdae85e9ac43d99780c372d79c119f7626, < a92e1a412c53dc0d9ad639e7abf8b3fc70a5b6ad
LinuxLinux2.6.27

References

Timeline

Published
Last Modified
Status
Received

Frequently Asked Questions

What is CVE-2026-98594?
In the Linux kernel, the following vulnerability has been resolved: tg3: clean up PHYLIB resources on probe failure tg3_get_invariants() can register an MDIO bus and connect a PHY for USE_PHYLIB devices. If tg3_init_one() later fails, its common error path releases the mappings and netdev without undoing those PHYLIB resources. Disconnect the PHY and unregister the MDIO bus before the remaining teardown. Guard PHY cleanup with USE_PHYLIB to match tg3_phy_init(), and call tg3_mdio_fini() unconditionally to match tg3_mdio_init(). The existing IS_CONNECTED and MDIOBUS_INITED flags make both helpers safe when initialization only completed partially. This issue was identified during our ongoing static-analysis research while reviewing kernel code.
How severe is CVE-2026-98594?
Severity scoring for CVE-2026-98594 is pending analysis.
How do I fix CVE-2026-98594?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

How Strix Helps

Related CVEs from 2026

View all 2026CVEs →

Are you affected by CVE-2026-98594?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST