CVE-2026-98488net: atl1e: fix soft lockup on out-of-range hw_next_to_clean read
Updated under an hour ago ()
Does this affect you?
It affects Linux. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: net: atl1e: fix soft lockup on out-of-range hw_next_to_clean read Same issue as atl1c (see the first commit in this series, "net: atl1c: fix soft lockup on out-of-range tpd_cons read"): the hardware can report an out-of-range hw_next_to_clean (seen as 0xffff) while the PCIe link/MAC is resetting. An out-of-range value can never be reached and the loop below would spin forever. Treat it as "nothing new to clean" instead.
- CVSS
- Not yet scored
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Received
- Record last updated
- Oct 18, 2026
- First seen by InfoSec Signals
- Oct 18, 2026
Affected products
Linux Linux linux:linux (from the name) | from a6a5325239c20202e18e21e94291bccc659fbf9e before ca862b1a4af7eac19429ca7ab92625f94ff4a46c; from a6a5325239c20202e18e21e94291bccc659fbf9e before 4bbb44075bd3e773d61706882ab923ece8b3b519; from a6a5325239c20202e18e21e94291bccc659fbf9e before 34bc747a61bef572244b01b095552b629cd8d2a2; from a6a5325239c20202e18e21e94291bccc659fbf9e before 1d8c85359b5075c7937925b673add7ed00e57ec8; from a6a5325239c20202e18e21e94291bccc659fbf9e before a277422d194c62daa1b961f5f739689e53fe7301; from a6a5325239c20202e18e21e94291bccc659fbf9e before 4b7161804d8f31227551901f93947bb4eea4690b; from a6a5325239c20202e18e21e94291bccc659fbf9e before 3a7d9271b37c80fb7db04aff3bc5621cfdaf9bee; from a6a5325239c20202e18e21e94291bccc659fbf9e before 374bf9e4b90f979e052332c4faca2d745c491a12 | CNA record |
References
- https://git.kernel.org/stable/c/ca862b1a4af7eac19429ca7ab92625f94ff4a46c
- https://git.kernel.org/stable/c/4bbb44075bd3e773d61706882ab923ece8b3b519
- https://git.kernel.org/stable/c/34bc747a61bef572244b01b095552b629cd8d2a2
- https://git.kernel.org/stable/c/1d8c85359b5075c7937925b673add7ed00e57ec8
- https://git.kernel.org/stable/c/a277422d194c62daa1b961f5f739689e53fe7301
- https://git.kernel.org/stable/c/4b7161804d8f31227551901f93947bb4eea4690b
- https://git.kernel.org/stable/c/3a7d9271b37c80fb7db04aff3bc5621cfdaf9bee
- https://git.kernel.org/stable/c/374bf9e4b90f979e052332c4faca2d745c491a12
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.