CVE-2026-98791net/mlx5e: Fix AF_XDP TX timestamp teardown NULL dereference
Updated under an hour ago ()
Does this affect you?
It affects Linux. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fix AF_XDP TX timestamp teardown NULL dereference During XSK TX queue teardown, outstanding descriptors are completed without a CQE. If one requested a TX timestamp, the completion path passes that NULL CQE to mlx5e_xsk_fill_timestamp(), which dereferences it. Return zero when no CQE is available, indicating that teardown did not produce a TX timestamp.
- CVSS
- Not yet scored
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Received
- Record last updated
- Oct 18, 2026
- First seen by InfoSec Signals
- Oct 18, 2026
Affected products
Linux Linux linux:linux (from the name) | from ec706a860eba99bf934d59f74b5db90af44e882e before fce70b6bf9f3261e887419a4e7caa25b80fa9d55; from ec706a860eba99bf934d59f74b5db90af44e882e before f81d40e2eb69552334f510114f3e6edd0d43178b; from ec706a860eba99bf934d59f74b5db90af44e882e before 63df0ef4c6e3105589e6bb2e758ce611b0ada86c; from ec706a860eba99bf934d59f74b5db90af44e882e before 7b97273cbebe9dd4fddc457f0c4f2a124d0e3996 | CNA record |
References
- https://git.kernel.org/stable/c/fce70b6bf9f3261e887419a4e7caa25b80fa9d55
- https://git.kernel.org/stable/c/f81d40e2eb69552334f510114f3e6edd0d43178b
- https://git.kernel.org/stable/c/63df0ef4c6e3105589e6bb2e758ce611b0ada86c
- https://git.kernel.org/stable/c/7b97273cbebe9dd4fddc457f0c4f2a124d0e3996
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.