CVE-2026-98618

CVE-2026-98618

published October 18, 2026

CVSS
—
EPSS
0%
Percentile
9.3
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

eth: fbnic: Handle maximum standalone channels

Standalone channels use one NAPI vector for each Tx and Rx queue.

fbnic's allocation path excludes FBNIC_MAX_TXQS from that layout. A

64-Tx/64-Rx configuration therefore records 128 vectors but allocates

only 64, leaving NULL entries that resource setup dereferences.

Include the maximum vector count in standalone allocation.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00200 · 9.3th percentile
Published
2026-10-18T20:17Z
References (4)
https://git.kernel.org/stable/c/16ff1023213cc39c1a7ce737205c2a1a53c3a716 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/1f4c73064a50f53d596c6f1d06d2d700f43c4b32 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/6c903188b67617070017305a325fa326f270a43d · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/9843e5fabd6ab296df9c025b1d0e5bf79a6b8a08 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67
EPSS history
Timeline
  • 20 OCT 03:34Z
    EPSS moved — → 0%
    epss
  • 18 OCT 15:19Z
    eth: fbnic: Handle maximum standalone channels
    cvelistv5
  • 18 OCT 15:19Z
    eth: fbnic: Handle maximum standalone channels
    cvelistv5