{"id":"CVE-2026-98895","title":"net/mlx5: HWS, Handle destroying table that has a miss table","summary":"In the Linux kernel, the following vulnerability has been resolved:\n\nnet/mlx5: HWS, Handle destroying table that has a miss table\n\nIf a table has a miss table that was created by\n'mlx5hws_table_set_default_miss' API function, its miss_tb…","severity":"high","cvss":7,"cvssVector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cvssSource":"cna","vendor":"Linux","product":"Linux","affected":["Linux >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < 16b81428f7b5f253ab30a998bc4f4ecd1c8823f8","Linux >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < 6efdc212627cecf33b594256ae4460b4c52a126a","Linux >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < 60e9e82f162ab7399373ff2185119289e4f6dc06","Linux < 6.12.111","Linux < 6.18.53","Linux (all versions)"],"published":"2026-10-23","updated":"2026-10-24","sourceUpdated":"2026-10-24T14:09:29.070Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-98895","references":[{"url":"https://git.kernel.org/stable/c/16b81428f7b5f253ab30a998bc4f4ecd1c8823f8"},{"url":"https://git.kernel.org/stable/c/6efdc212627cecf33b594256ae4460b4c52a126a"},{"url":"https://git.kernel.org/stable/c/60e9e82f162ab7399373ff2185119289e4f6dc06"}],"tags":["cve.org"],"epss":0.00206,"epssPercentile":0.10168,"ingestedAt":"2026-10-23T13:24:55.577Z","slug":"CVE-2026-98895","body":"## Overview\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nnet/mlx5: HWS, Handle destroying table that has a miss table\n\nIf a table has a miss table that was created by\n'mlx5hws_table_set_default_miss' API function, its miss_tbl\nkeeps the table that points to it in a list.\nIf such table is deleted, we need to also remove it from the\nmiss_tbl list, otherwise the node in miss_tbl list will contain\ngarbage.\n\n## Affected\n\n- `Linux >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < 16b81428f7b5f253ab30a998bc4f4ecd1c8823f8`\n- `Linux >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < 6efdc212627cecf33b594256ae4460b4c52a126a`\n- `Linux >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < 60e9e82f162ab7399373ff2185119289e4f6dc06`\n- `Linux < 6.12.111`\n- `Linux < 6.18.53`\n- `Linux (all versions)`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"twilight","depthScore":39,"depthScoreParts":{"impact":38.5,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[{"seq":228916,"id":"CVE-2026-98895","ts":1792854108673,"field":"cvss","old":null,"new":"7"},{"seq":228915,"id":"CVE-2026-98895","ts":1792854108673,"field":"severity","old":"none","new":"high"}]}