CVE-2026-98494
Received Received - Intake

Linux kernel Soft Lockup in atl1 Driver Due to Out-of-Range cmb_tpd_next_to_clean

Publication date: 2026-10-18

Last updated on: 2026-10-18

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: net: atl1: fix soft lockup on out-of-range cmb_tpd_next_to_clean read Same issue as atl1c (see the first commit in this series, "net: atl1c: fix soft lockup on out-of-range tpd_cons read"): the hardware can report an out-of-range cmb_tpd_next_to_clean (seen as 0xffff) while the PCIe link/MAC is resetting. An out-of-range value can never be reached and the loop below would spin forever. Treat it as "nothing new to clean" instead.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-18
Last Modified
2026-10-18
Generated
2026-10-18
AI Q&A
2026-10-18
EPSS Evaluated
N/A
NVD
CVE-2026-98494
EUVD
EUVD-2026-103734

Affected Vendors & Products

Showing 9 associated CPEs
Vendor Product Version / Range
Linux Linux f3cc28c797604fa1cda4aef3f250f465de54a0ca
Linux Linux f3cc28c797604fa1cda4aef3f250f465de54a0ca
Linux Linux f3cc28c797604fa1cda4aef3f250f465de54a0ca
Linux Linux f3cc28c797604fa1cda4aef3f250f465de54a0ca
Linux Linux f3cc28c797604fa1cda4aef3f250f465de54a0ca
Linux Linux f3cc28c797604fa1cda4aef3f250f465de54a0ca
Linux Linux f3cc28c797604fa1cda4aef3f250f465de54a0ca
Linux Linux f3cc28c797604fa1cda4aef3f250f465de54a0ca
Linux Linux 2.6.21

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability affects the Linux kernel's atl1 network driver. It occurs when the hardware reports an out-of-range value for cmb_tpd_next_to_clean during a PCIe link or MAC reset. This causes an infinite loop in the driver, leading to a soft lockup where the system becomes unresponsive.

Impact Analysis

This vulnerability can cause system freezes or crashes when the affected network hardware is reset or experiences link issues. It primarily impacts systems using the atl1 driver for network communication.

Mitigation Strategies

Update the Linux kernel to the latest patched version to resolve the soft lockup issue in the atl1 driver.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-98494. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart