CVE-2026-98791

CVE-2026-98791

published October 18, 2026

CVSS
—
EPSS
0%
Percentile
5.7
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

net/mlx5e: Fix AF_XDP TX timestamp teardown NULL dereference

During XSK TX queue teardown, outstanding descriptors are completed

without a CQE. If one requested a TX timestamp, the completion path

passes that NULL CQE to mlx5e_xsk_fill_timestamp(), which dereferences

it.

Return zero when no CQE is available, indicating that teardown did not

produce a TX timestamp.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00168 · 5.7th percentile
Published
2026-10-18T20:17Z
References (4)
EPSS history
Timeline
  • 20 OCT 03:34Z
    EPSS moved — → 0%
    epss
  • 18 OCT 15:48Z
    net/mlx5e: Fix AF_XDP TX timestamp teardown NULL dereference
    cvelistv5
  • 18 OCT 15:48Z
    net/mlx5e: Fix AF_XDP TX timestamp teardown NULL dereference
    cvelistv5