CVE-2026-98494None▾ SunlitIn the Linux kernel, the following vulnerability has been resolved: net: atl1: fix soft lockup on out-of-range cmb_tpd_next_to_clean read Same issue as atl1c (see the first commit in this series, "net: atl1c: fix soft lockup on out-of-…
▾ Sunlit zone — Low / medium · no exploitation signal
impact 2.8 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
In the Linux kernel, the following vulnerability has been resolved:
net: atl1: fix soft lockup on out-of-range cmb_tpd_next_to_clean read
Same issue as atl1c (see the first commit in this series, "net: atl1c: fix soft lockup on out-of-range tpd_cons read"): the hardware can report an out-of-range cmb_tpd_next_to_clean (seen as 0xffff) while the PCIe link/MAC is resetting. An out-of-range value can never be reached and the loop below would spin forever. Treat it as "nothing new to clean" instead.
Linux >= f3cc28c797604fa1cda4aef3f250f465de54a0ca < 5d7ac337d37cb97d77e4c910d37746694b606661Linux >= f3cc28c797604fa1cda4aef3f250f465de54a0ca < c55e51d5899e80f9593b26985ed0b89e0c828a5eLinux >= f3cc28c797604fa1cda4aef3f250f465de54a0ca < 6ab9f61ca851f02ae4398cebaf00735a22e1d6caLinux >= f3cc28c797604fa1cda4aef3f250f465de54a0ca < 632cd7b81cb7bab36112f02eb2ee7f7cc1214fb1Linux >= f3cc28c797604fa1cda4aef3f250f465de54a0ca < 79e2447b11322c27ef9ac423be0a94efc7691f02Linux >= f3cc28c797604fa1cda4aef3f250f465de54a0ca < 0f573b0576252d44fb27ab8470ea873bc6408ef3Linux >= f3cc28c797604fa1cda4aef3f250f465de54a0ca < 6285919d4c06254d257d24dc980f6332e1984a82Linux >= f3cc28c797604fa1cda4aef3f250f465de54a0ca < 43e746821f5f5afbbf68e388bf9fbe221e03bfcaLinux 2.6.21Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-98770Noneusb: gadget: midi2: Fix the jack descriptor array sizes
CVE-2026-98769Noneusb: gadget: f_uac1_legacy: validate bRequest index in generic_{set,get}_cmd
CVE-2026-98774Nonerust_binder: cancel deferred work items in thread exit
CVE-2026-98772NoneUSB: serial: fix port tear down use-after-free
CVE-2026-98771Noneusb: storage: sierra_ms: reject short SWoC info transfers
CVE-2026-98776Nonebinderfs: fix UAF write in binder_add_device