CVE-2026-97411

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2026-97411
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-97411.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-97411
Downstream
Published
2026-09-24T16:03:17Z
Modified
2026-10-05T02:30:35Z
Summary
net: ibm: emac: mal: fix potential system hang in mal_remove()
Details

In the Linux kernel, the following vulnerability has been resolved:

net: ibm: emac: mal: fix potential system hang in mal_remove()

napi_disable() is not idempotent and calling it on an already-disabled or unenabled NAPI context will cause the kernel to spin indefinitely waiting for the NAPI_STATE_SCHED bit to clear.

In mal_remove(), napi_disable() is called unconditionally. If no MACs were registered, NAPI was never enabled. Also, if they were registered but subsequently unregistered, NAPI was already disabled in mal_unregister_commac(). In either case, calling napi_disable() causes the kernel to hang upon module removal.

Fix this by only calling napi_disable() in mal_remove() if the commac list is not empty (which implies NAPI is enabled).

Database specific 
{
    "cna_assigner":  "Linux",
    "osv_generated_from":  "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97411.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
b3e441c6ed8655a42e7b4da1b6dc7939f259d9c9
Fixed
9c1c814a662d9c81959eba591bb52b24639390f2
Fixed
34c4cae51718d6f393415e01c61314c1bde02f2e
Fixed
62126e73e230cf4bd6c27cf201949c4290af84a1
Fixed
f0399b3e212741bc5a64b8399d6266c4a150bdfe
Fixed
f6c1aad9b35fa083f48ce0c5926204891d82e089
Fixed
c4cb9a728df66c46067b26263f5beb633aae4087
Fixed
7c5d41f87f079990bf241359e3c1332d8d10fe87

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-97411.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
2.6.24
Fixed
5.10.271
Type
ECOSYSTEM
Events
Introduced
5.11.0
Fixed
5.15.222
Type
ECOSYSTEM
Events
Introduced
5.16.0
Fixed
6.1.189
Type
ECOSYSTEM
Events
Introduced
6.2.0
Fixed
6.6.158
Type
ECOSYSTEM
Events
Introduced
6.7.0
Fixed
6.12.111
Type
ECOSYSTEM
Events
Introduced
6.13.0
Fixed
6.18.53

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-97411.json"