CVE-2026-98618
Received Received - Intake

fbnic Driver Maximum Standalone Channel Handling Vulnerability

Publication date: 2026-10-18

Last updated on: 2026-10-18

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: eth: fbnic: Handle maximum standalone channels Standalone channels use one NAPI vector for each Tx and Rx queue. fbnic's allocation path excludes FBNIC_MAX_TXQS from that layout. A 64-Tx/64-Rx configuration therefore records 128 vectors but allocates only 64, leaving NULL entries that resource setup dereferences. Include the maximum vector count in standalone allocation.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-18
Last Modified
2026-10-18
Generated
2026-10-18
AI Q&A
2026-10-18
EPSS Evaluated
N/A
NVD
CVE-2026-98618
EUVD
EUVD-2026-103663

Affected Vendors & Products

Showing 5 associated CPEs
Vendor Product Version / Range
Linux Linux bc6107771bb4be3009168cfda24d22131c026fe8
Linux Linux bc6107771bb4be3009168cfda24d22131c026fe8
Linux Linux bc6107771bb4be3009168cfda24d22131c026fe8
Linux Linux bc6107771bb4be3009168cfda24d22131c026fe8
Linux Linux 6.11

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability in the Linux kernel affects the fbnic driver. It occurs when handling maximum standalone channels, where the allocation path excludes FBNIC_MAX_TXQS. A 64-Tx/64-Rx configuration allocates only 64 vectors but records 128, leaving NULL entries that cause resource setup dereferences.

Detection Guidance

This vulnerability affects the Linux kernel's fbnic driver for standalone channels. Detection requires checking kernel logs for NULL pointer dereferences in network driver operations or examining the fbnic driver configuration for mismatched vector allocations. Use commands like dmesg | grep fbnic or journalctl -k | grep fbnic to inspect driver logs.

Impact Analysis

This vulnerability could lead to system crashes or instability due to dereferencing NULL entries during resource setup in the fbnic driver. It may cause denial-of-service conditions or unexpected behavior in systems using affected Linux kernel versions.

Mitigation Strategies

Update the Linux kernel to the latest patched version to resolve the fbnic driver issue. If immediate patching is not possible, disable the fbnic driver or standalone channel mode as a temporary workaround. Monitor vendor advisories for kernel updates addressing this CVE.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-98618. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart