CVE-2026-98488

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2026-98488
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-98488.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-98488
Downstream
Published
2026-10-18T15:16:14Z
Modified
2026-10-20T02:30:22Z
Summary
net: atl1e: fix soft lockup on out-of-range hw_next_to_clean read
Details

In the Linux kernel, the following vulnerability has been resolved:

net: atl1e: fix soft lockup on out-of-range hw_next_to_clean read

Same issue as atl1c (see the first commit in this series, "net: atl1c: fix soft lockup on out-of-range tpd_cons read"): the hardware can report an out-of-range hw_next_to_clean (seen as 0xffff) while the PCIe link/MAC is resetting. An out-of-range value can never be reached and the loop below would spin forever. Treat it as "nothing new to clean" instead.

Database specific 
{
    "cna_assigner":  "Linux",
    "osv_generated_from":  "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/98xxx/CVE-2026-98488.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
a6a5325239c20202e18e21e94291bccc659fbf9e
Fixed
ca862b1a4af7eac19429ca7ab92625f94ff4a46c
Fixed
4bbb44075bd3e773d61706882ab923ece8b3b519
Fixed
34bc747a61bef572244b01b095552b629cd8d2a2
Fixed
1d8c85359b5075c7937925b673add7ed00e57ec8
Fixed
a277422d194c62daa1b961f5f739689e53fe7301
Fixed
4b7161804d8f31227551901f93947bb4eea4690b
Fixed
3a7d9271b37c80fb7db04aff3bc5621cfdaf9bee
Fixed
374bf9e4b90f979e052332c4faca2d745c491a12

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-98488.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
2.6.27
Fixed
5.10.271
Type
ECOSYSTEM
Events
Introduced
5.11.0
Fixed
5.15.222
Type
ECOSYSTEM
Events
Introduced
5.16.0
Fixed
6.1.189
Type
ECOSYSTEM
Events
Introduced
6.2.0
Fixed
6.6.158
Type
ECOSYSTEM
Events
Introduced
6.7.0
Fixed
6.12.112
Type
ECOSYSTEM
Events
Introduced
6.13.0
Fixed
6.18.55
Type
ECOSYSTEM
Events
Introduced
6.19.0
Fixed
7.2.9

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-98488.json"