CVE-2026-98630

Received Received - Intake

fbnic Driver Payload Page Pool Error Cleanup Flaw

Publication date: 2026-10-18

Last updated on: 2026-10-19

Assigner: kernel.org

Description

In the Linux kernel, the following vulnerability has been resolved: eth: fbnic: Fix payload page pool error cleanup The payload page pool pointer contains an error pointer when its allocation fails. The cleanup path passes that error pointer to page_pool_destroy() instead of destroying the header page pool. This can dereference the error pointer and leave the header page pool allocated. Destroy the header page pool instead.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-18

Last Modified

2026-10-19

Generated

2026-10-19

AI Q&A

2026-10-18

EPSS Evaluated

N/A

NVD

CVE-2026-98630

EUVD

EUVD-2026-103544

Affected Vendors & Products

Vendor	Product	Version / Range
Linux	Linux	8a11010fdd9615e8dbb2f5d562ab88caa8a9516a
Linux	Linux	8a11010fdd9615e8dbb2f5d562ab88caa8a9516a
Linux	Linux	8a11010fdd9615e8dbb2f5d562ab88caa8a9516a
Linux	Linux	6.18

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This vulnerability in the Linux kernel involves a cleanup error in the eth: fbnic driver. When allocating memory for a payload page pool fails, an error pointer is stored instead of a valid pointer. The cleanup process then incorrectly passes this error pointer to page_pool_destroy(), which can cause a dereference of the error pointer and leave the header page pool still allocated.

Detection Guidance

This vulnerability is specific to the Linux kernel's eth: fbnic driver and involves a page pool error cleanup issue. Detection requires checking for kernel logs or errors related to the fbnic driver or page pool operations. Commands like dmesg | grep fbnic or journalctl -k | grep fbnic may help identify related errors.

Impact Analysis

This vulnerability could lead to memory leaks or crashes in systems using the affected Linux kernel driver. It may cause instability or unexpected behavior in networking operations handled by the eth: fbnic driver.

Compliance Impact

This vulnerability does not directly affect compliance with standards like GDPR or HIPAA as it is a low-level kernel memory management issue unrelated to data protection or privacy controls.

Mitigation Strategies

Update the Linux kernel to the latest patched version to resolve the eth: fbnic payload page pool error cleanup vulnerability.

Hi! I’m here to help you understand CVE-2026-98630. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70