CVE-2026-98488

CVE-2026-98488

published October 18, 2026

CVSS
—
EPSS
0%
Percentile
10.7
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

net: atl1e: fix soft lockup on out-of-range hw_next_to_clean read

Same issue as atl1c (see the first commit in this series, "net:

atl1c: fix soft lockup on out-of-range tpd_cons read"): the hardware

can report an out-of-range hw_next_to_clean (seen as 0xffff) while

the PCIe link/MAC is resetting. An out-of-range value can never be

reached and the loop below would spin forever. Treat it as "nothing

new to clean" instead.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00210 · 10.7th percentile
Published
2026-10-18T20:16Z
References (8)
EPSS history
Timeline
  • 20 OCT 03:34Z
    EPSS moved — → 0%
    epss
  • 18 OCT 15:16Z
    net: atl1e: fix soft lockup on out-of-range hw_next_to_clean read
    cvelistv5
  • 18 OCT 15:16Z
    net: atl1e: fix soft lockup on out-of-range hw_next_to_clean read
    cvelistv5