CVE-2026-97411net: ibm: emac: mal: fix potential system hang in mal_remove()
Updated under an hour ago ()
Does this affect you?
It affects Linux. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: net: ibm: emac: mal: fix potential system hang in mal_remove() napi_disable() is not idempotent and calling it on an already-disabled or unenabled NAPI context will cause the kernel to spin indefinitely waiting for the NAPI_STATE_SCHED bit to clear. In mal_remove(), napi_disable() is called unconditionally. If no MACs were registered, NAPI was never enabled. Also, if they were registered but subsequently unregistered, NAPI was already disabled in mal_unregister_commac(). In either case, calling napi_disable() causes the kernel to hang upon module removal. Fix this by only calling napi_disable() in mal_remove() if the commac list is not empty (which implies NAPI is enabled).
- CVSS
- Not yet scored
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Received
- Record last updated
- Oct 3, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
Linux Linux linux:linux (from the name) | from b3e441c6ed8655a42e7b4da1b6dc7939f259d9c9 before 9c1c814a662d9c81959eba591bb52b24639390f2; from b3e441c6ed8655a42e7b4da1b6dc7939f259d9c9 before 34c4cae51718d6f393415e01c61314c1bde02f2e; from b3e441c6ed8655a42e7b4da1b6dc7939f259d9c9 before 62126e73e230cf4bd6c27cf201949c4290af84a1; from b3e441c6ed8655a42e7b4da1b6dc7939f259d9c9 before f0399b3e212741bc5a64b8399d6266c4a150bdfe; from b3e441c6ed8655a42e7b4da1b6dc7939f259d9c9 before f6c1aad9b35fa083f48ce0c5926204891d82e089; from b3e441c6ed8655a42e7b4da1b6dc7939f259d9c9 before c4cb9a728df66c46067b26263f5beb633aae4087; from b3e441c6ed8655a42e7b4da1b6dc7939f259d9c9 before 7c5d41f87f079990bf241359e3c1332d8d10fe87 | CNA record |
References
- https://git.kernel.org/stable/c/9c1c814a662d9c81959eba591bb52b24639390f2
- https://git.kernel.org/stable/c/34c4cae51718d6f393415e01c61314c1bde02f2e
- https://git.kernel.org/stable/c/62126e73e230cf4bd6c27cf201949c4290af84a1
- https://git.kernel.org/stable/c/f0399b3e212741bc5a64b8399d6266c4a150bdfe
- https://git.kernel.org/stable/c/f6c1aad9b35fa083f48ce0c5926204891d82e089
- https://git.kernel.org/stable/c/c4cb9a728df66c46067b26263f5beb633aae4087
- https://git.kernel.org/stable/c/7c5d41f87f079990bf241359e3c1332d8d10fe87
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.