CVE-2026-98494

CVE-2026-98494

published October 18, 2026

CVSS
—
EPSS
0%
Percentile
10.7
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

net: atl1: fix soft lockup on out-of-range cmb_tpd_next_to_clean read

Same issue as atl1c (see the first commit in this series, "net:

atl1c: fix soft lockup on out-of-range tpd_cons read"): the hardware

can report an out-of-range cmb_tpd_next_to_clean (seen as 0xffff)

while the PCIe link/MAC is resetting. An out-of-range value can

never be reached and the loop below would spin forever. Treat it as

"nothing new to clean" instead.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00210 · 10.7th percentile
Published
2026-10-18T20:17Z
References (8)
EPSS history
Timeline
  • 20 OCT 03:34Z
    EPSS moved — → 0%
    epss
  • 18 OCT 15:16Z
    net: atl1: fix soft lockup on out-of-range cmb_tpd_next_to_clean read
    cvelistv5
  • 18 OCT 15:16Z
    net: atl1: fix soft lockup on out-of-range cmb_tpd_next_to_clean read
    cvelistv5