CVE-2026-98494

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-98494", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "state": "PUBLISHED", "assignerShortName": "Linux", "dateReserved": "2026-09-25T10:25:14.353Z", "datePublished": "2026-10-18T15:16:23.155Z", "dateUpdated": "2026-10-19T09:20:31.295Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2026-10-19T09:20:31.295Z"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: atl1: fix soft lockup on out-of-range cmb_tpd_next_to_clean read\n\nSame issue as atl1c (see the first commit in this series, \"net:\natl1c: fix soft lockup on out-of-range tpd_cons read\"): the hardware\ncan report an out-of-range cmb_tpd_next_to_clean (seen as 0xffff)\nwhile the PCIe link/MAC is resetting. An out-of-range value can\nnever be reached and the loop below would spin forever. Treat it as\n\"nothing new to clean\" instead."}], "affected": [{"product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/net/ethernet/atheros/atlx/atl1.c"], "versions": [{"version": "f3cc28c797604fa1cda4aef3f250f465de54a0ca", "lessThan": "5d7ac337d37cb97d77e4c910d37746694b606661", "status": "affected", "versionType": "git"}, {"version": "f3cc28c797604fa1cda4aef3f250f465de54a0ca", "lessThan": "c55e51d5899e80f9593b26985ed0b89e0c828a5e", "status": "affected", "versionType": "git"}, {"version": "f3cc28c797604fa1cda4aef3f250f465de54a0ca", "lessThan": "6ab9f61ca851f02ae4398cebaf00735a22e1d6ca", "status": "affected", "versionType": "git"}, {"version": "f3cc28c797604fa1cda4aef3f250f465de54a0ca", "lessThan": "632cd7b81cb7bab36112f02eb2ee7f7cc1214fb1", "status": "affected", "versionType": "git"}, {"version": "f3cc28c797604fa1cda4aef3f250f465de54a0ca", "lessThan": "79e2447b11322c27ef9ac423be0a94efc7691f02", "status": "affected", "versionType": "git"}, {"version": "f3cc28c797604fa1cda4aef3f250f465de54a0ca", "lessThan": "0f573b0576252d44fb27ab8470ea873bc6408ef3", "status": "affected", "versionType": "git"}, {"version": "f3cc28c797604fa1cda4aef3f250f465de54a0ca", "lessThan": "6285919d4c06254d257d24dc980f6332e1984a82", "status": "affected", "versionType": "git"}, {"version": "f3cc28c797604fa1cda4aef3f250f465de54a0ca", "lessThan": "43e746821f5f5afbbf68e388bf9fbe221e03bfca", "status": "affected", "versionType": "git"}]}, {"product": "Linux", "vendor": "Linux", "defaultStatus": "affected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/net/ethernet/atheros/atlx/atl1.c"], "versions": [{"version": "2.6.21", "status": "affected"}, {"version": "0", "lessThan": "2.6.21", "status": "unaffected", "versionType": "semver"}, {"version": "5.10.271", "lessThanOrEqual": "5.10.*", "status": "unaffected", "versionType": "semver"}, {"version": "5.15.222", "lessThanOrEqual": "5.15.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.1.189", "lessThanOrEqual": "6.1.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.6.158", "lessThanOrEqual": "6.6.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.12.112", "lessThanOrEqual": "6.12.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.18.55", "lessThanOrEqual": "6.18.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.2.9", "lessThanOrEqual": "7.2.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.3", "lessThanOrEqual": "*", "status": "unaffected", "versionType": "original_commit_for_fix"}]}], "cpeApplicability": [{"nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "2.6.21", "versionEndExcluding": "5.10.271"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "2.6.21", "versionEndExcluding": "5.15.222"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "2.6.21", "versionEndExcluding": "6.1.189"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "2.6.21", "versionEndExcluding": "6.6.158"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "2.6.21", "versionEndExcluding": "6.12.112"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "2.6.21", "versionEndExcluding": "6.18.55"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "2.6.21", "versionEndExcluding": "7.2.9"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "2.6.21", "versionEndExcluding": "7.3"}]}]}], "references": [{"url": "https://git.kernel.org/stable/c/5d7ac337d37cb97d77e4c910d37746694b606661"}, {"url": "https://git.kernel.org/stable/c/c55e51d5899e80f9593b26985ed0b89e0c828a5e"}, {"url": "https://git.kernel.org/stable/c/6ab9f61ca851f02ae4398cebaf00735a22e1d6ca"}, {"url": "https://git.kernel.org/stable/c/632cd7b81cb7bab36112f02eb2ee7f7cc1214fb1"}, {"url": "https://git.kernel.org/stable/c/79e2447b11322c27ef9ac423be0a94efc7691f02"}, {"url": "https://git.kernel.org/stable/c/0f573b0576252d44fb27ab8470ea873bc6408ef3"}, {"url": "https://git.kernel.org/stable/c/6285919d4c06254d257d24dc980f6332e1984a82"}, {"url": "https://git.kernel.org/stable/c/43e746821f5f5afbbf68e388bf9fbe221e03bfca"}], "title": "net: atl1: fix soft lockup on out-of-range cmb_tpd_next_to_clean read", "x_generator": {"engine": "bippy-1.2.0"}}}}

{}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "Linux", "programFiles": ["drivers/net/ethernet/atheros/atlx/atl1.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"lessThan": "5d7ac337d37cb97d77e4c910d37746694b606661", "status": "affected", "version": "f3cc28c797604fa1cda4aef3f250f465de54a0ca", "versionType": "git"}, {"lessThan": "c55e51d5899e80f9593b26985ed0b89e0c828a5e", "status": "affected", "version": "f3cc28c797604fa1cda4aef3f250f465de54a0ca", "versionType": "git"}, {"lessThan": "6ab9f61ca851f02ae4398cebaf00735a22e1d6ca", "status": "affected", "version": "f3cc28c797604fa1cda4aef3f250f465de54a0ca", "versionType": "git"}, {"lessThan": "632cd7b81cb7bab36112f02eb2ee7f7cc1214fb1", "status": "affected", "version": "f3cc28c797604fa1cda4aef3f250f465de54a0ca", "versionType": "git"}, {"lessThan": "79e2447b11322c27ef9ac423be0a94efc7691f02", "status": "affected", "version": "f3cc28c797604fa1cda4aef3f250f465de54a0ca", "versionType": "git"}, {"lessThan": "0f573b0576252d44fb27ab8470ea873bc6408ef3", "status": "affected", "version": "f3cc28c797604fa1cda4aef3f250f465de54a0ca", "versionType": "git"}, {"lessThan": "6285919d4c06254d257d24dc980f6332e1984a82", "status": "affected", "version": "f3cc28c797604fa1cda4aef3f250f465de54a0ca", "versionType": "git"}, {"lessThan": "43e746821f5f5afbbf68e388bf9fbe221e03bfca", "status": "affected", "version": "f3cc28c797604fa1cda4aef3f250f465de54a0ca", "versionType": "git"}]}, {"defaultStatus": "affected", "product": "Linux", "programFiles": ["drivers/net/ethernet/atheros/atlx/atl1.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"status": "affected", "version": "2.6.21"}, {"lessThan": "2.6.21", "status": "unaffected", "version": "0", "versionType": "semver"}, {"lessThanOrEqual": "5.10.*", "status": "unaffected", "version": "5.10.271", "versionType": "semver"}, {"lessThanOrEqual": "5.15.*", "status": "unaffected", "version": "5.15.222", "versionType": "semver"}, {"lessThanOrEqual": "6.1.*", "status": "unaffected", "version": "6.1.189", "versionType": "semver"}, {"lessThanOrEqual": "6.6.*", "status": "unaffected", "version": "6.6.158", "versionType": "semver"}, {"lessThanOrEqual": "6.12.*", "status": "unaffected", "version": "6.12.112", "versionType": "semver"}, {"lessThanOrEqual": "6.18.*", "status": "unaffected", "version": "6.18.55", "versionType": "semver"}, {"lessThanOrEqual": "7.2.*", "status": "unaffected", "version": "7.2.9", "versionType": "semver"}, {"lessThanOrEqual": "*", "status": "unaffected", "version": "7.3", "versionType": "original_commit_for_fix"}]}], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: atl1: fix soft lockup on out-of-range cmb_tpd_next_to_clean read\n\nSame issue as atl1c (see the first commit in this series, \"net:\natl1c: fix soft lockup on out-of-range tpd_cons read\"): the hardware\ncan report an out-of-range cmb_tpd_next_to_clean (seen as 0xffff)\nwhile the PCIe link/MAC is resetting. An out-of-range value can\nnever be reached and the loop below would spin forever. Treat it as\n\"nothing new to clean\" instead."}], "id": "CVE-2026-98494", "lastModified": "2026-10-19T10:19:01.687", "metrics": {}, "published": "2026-10-18T16:17:00.370", "references": [{"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/0f573b0576252d44fb27ab8470ea873bc6408ef3"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/43e746821f5f5afbbf68e388bf9fbe221e03bfca"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/5d7ac337d37cb97d77e4c910d37746694b606661"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/6285919d4c06254d257d24dc980f6332e1984a82"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/632cd7b81cb7bab36112f02eb2ee7f7cc1214fb1"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/6ab9f61ca851f02ae4398cebaf00735a22e1d6ca"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/79e2447b11322c27ef9ac423be0a94efc7691f02"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/c55e51d5899e80f9593b26985ed0b89e0c828a5e"}], "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "vulnStatus": "Received"}

{"bugzilla": {"description": "kernel: net: atl1: fix soft lockup on out-of-range cmb_tpd_next_to_clean read", "id": "2554902", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2554902"}, "csaw": false, "cvss3": {"cvss3_base_score": "4.1", "cvss3_scoring_vector": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H", "status": "draft"}, "cwe": "CWE-835", "details": ["In the Linux kernel, the following vulnerability has been resolved:\nnet: atl1: fix soft lockup on out-of-range cmb_tpd_next_to_clean read\nSame issue as atl1c (see the first commit in this series, \"net:\natl1c: fix soft lockup on out-of-range tpd_cons read\"): the hardware\ncan report an out-of-range cmb_tpd_next_to_clean (seen as 0xffff)\nwhile the PCIe link/MAC is resetting. An out-of-range value can\nnever be reached and the loop below would spin forever. Treat it as\n\"nothing new to clean\" instead.", "A flaw was found in the Linux kernel's atl1 network driver. During a PCIe link or hardware reset, the network adapter can return an out-of-range status value that the driver fails to validate properly. This condition can trap the driver in an infinite loop, resulting in a kernel soft lockup and leading to a Denial of Service (DoS)."], "name": "CVE-2026-98494", "package_state": [{"cpe": "cpe:/o:redhat:enterprise_linux:10", "fix_state": "Fix deferred", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 10"}, {"cpe": "cpe:/o:redhat:enterprise_linux:6", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 6"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Fix deferred", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Fix deferred", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Fix deferred", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Fix deferred", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Fix deferred", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 9"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Fix deferred", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 9"}, {"cpe": "cpe:/a:redhat:openshift:4", "fix_state": "Fix deferred", "package_name": "openshift/ose-rhel-coreos-8", "product_name": "Red Hat OpenShift Container Platform 4"}, {"cpe": "cpe:/a:redhat:openshift:4", "fix_state": "Fix deferred", "package_name": "openshift/ose-rhel-coreos-9", "product_name": "Red Hat OpenShift Container Platform 4"}], "public_date": "2026-10-18T00:00:00Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2026-98494\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-98494\nhttps://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2026/CVE-2026-98494.mbox"], "threat_severity": "Moderate"}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[f3cc28c797604fa1cda4aef3f250f465de54a0ca,5d7ac337d37cb97d77e4c910d37746694b606661)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[f3cc28c797604fa1cda4aef3f250f465de54a0ca,c55e51d5899e80f9593b26985ed0b89e0c828a5e)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[f3cc28c797604fa1cda4aef3f250f465de54a0ca,6ab9f61ca851f02ae4398cebaf00735a22e1d6ca)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[f3cc28c797604fa1cda4aef3f250f465de54a0ca,632cd7b81cb7bab36112f02eb2ee7f7cc1214fb1)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[f3cc28c797604fa1cda4aef3f250f465de54a0ca,79e2447b11322c27ef9ac423be0a94efc7691f02)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[f3cc28c797604fa1cda4aef3f250f465de54a0ca,0f573b0576252d44fb27ab8470ea873bc6408ef3)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[f3cc28c797604fa1cda4aef3f250f465de54a0ca,6285919d4c06254d257d24dc980f6332e1984a82)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[f3cc28c797604fa1cda4aef3f250f465de54a0ca,43e746821f5f5afbbf68e388bf9fbe221e03bfca)"}}], "enrichment": {"confidence": 99.0, "confidence_source": "inferred", "scores": [{"score": 99.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "Linux", "source": "cna", "vendor": "Linux"}, "product": "linux_kernel", "vendor": "linux"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "2.6.21"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[0,2.6.21)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[5.10.271,5.11.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[5.15.222,5.16.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.1.189,6.2.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.6.158,6.7.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.12.112,6.13.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.18.55,6.19.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[7.2.9,7.3.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[7.3-rc5,*]"}}], "enrichment": {"confidence": 99.0, "confidence_source": "inferred", "scores": [{"score": 99.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "Linux", "source": "cna", "vendor": "Linux"}, "product": "linux_kernel", "vendor": "linux"}], "created": "2026-10-18T17:45:06.375373+00:00", "updated": "2026-10-22T22:45:13.863466+00:00", "vendors": ["linux", "linux$PRODUCT$linux_kernel"], "weaknesses": ["CWE-703", "CWE-835"]}