---
id: CVE-2026-98494
title: 'net: atl1: fix soft lockup on out-of-range cmb_tpd_next_to_clean read'
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  net: atl1: fix soft lockup on out-of-range cmb_tpd_next_to_clean read

  Same issue as atl1c (see the first commit in this series, "net:
  atl1c: fix soft lockup on out-of-…
severity: none
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= f3cc28c797604fa1cda4aef3f250f465de54a0ca <
    5d7ac337d37cb97d77e4c910d37746694b606661
  - >-
    Linux >= f3cc28c797604fa1cda4aef3f250f465de54a0ca <
    c55e51d5899e80f9593b26985ed0b89e0c828a5e
  - >-
    Linux >= f3cc28c797604fa1cda4aef3f250f465de54a0ca <
    6ab9f61ca851f02ae4398cebaf00735a22e1d6ca
  - >-
    Linux >= f3cc28c797604fa1cda4aef3f250f465de54a0ca <
    632cd7b81cb7bab36112f02eb2ee7f7cc1214fb1
  - >-
    Linux >= f3cc28c797604fa1cda4aef3f250f465de54a0ca <
    79e2447b11322c27ef9ac423be0a94efc7691f02
  - >-
    Linux >= f3cc28c797604fa1cda4aef3f250f465de54a0ca <
    0f573b0576252d44fb27ab8470ea873bc6408ef3
  - >-
    Linux >= f3cc28c797604fa1cda4aef3f250f465de54a0ca <
    6285919d4c06254d257d24dc980f6332e1984a82
  - >-
    Linux >= f3cc28c797604fa1cda4aef3f250f465de54a0ca <
    43e746821f5f5afbbf68e388bf9fbe221e03bfca
  - Linux 2.6.21
published: '2026-10-18'
updated: '2026-10-18'
sourceUpdated: '2026-10-18T15:16:23.155Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-98494'
references:
  - url: 'https://git.kernel.org/stable/c/5d7ac337d37cb97d77e4c910d37746694b606661'
  - url: 'https://git.kernel.org/stable/c/c55e51d5899e80f9593b26985ed0b89e0c828a5e'
  - url: 'https://git.kernel.org/stable/c/6ab9f61ca851f02ae4398cebaf00735a22e1d6ca'
  - url: 'https://git.kernel.org/stable/c/632cd7b81cb7bab36112f02eb2ee7f7cc1214fb1'
  - url: 'https://git.kernel.org/stable/c/79e2447b11322c27ef9ac423be0a94efc7691f02'
  - url: 'https://git.kernel.org/stable/c/0f573b0576252d44fb27ab8470ea873bc6408ef3'
  - url: 'https://git.kernel.org/stable/c/6285919d4c06254d257d24dc980f6332e1984a82'
  - url: 'https://git.kernel.org/stable/c/43e746821f5f5afbbf68e388bf9fbe221e03bfca'
tags:
  - cve.org
ingestedAt: '2026-10-18T15:45:12.292Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

net: atl1: fix soft lockup on out-of-range cmb_tpd_next_to_clean read

Same issue as atl1c (see the first commit in this series, "net:
atl1c: fix soft lockup on out-of-range tpd_cons read"): the hardware
can report an out-of-range cmb_tpd_next_to_clean (seen as 0xffff)
while the PCIe link/MAC is resetting. An out-of-range value can
never be reached and the loop below would spin forever. Treat it as
"nothing new to clean" instead.

## Affected

- `Linux >= f3cc28c797604fa1cda4aef3f250f465de54a0ca < 5d7ac337d37cb97d77e4c910d37746694b606661`
- `Linux >= f3cc28c797604fa1cda4aef3f250f465de54a0ca < c55e51d5899e80f9593b26985ed0b89e0c828a5e`
- `Linux >= f3cc28c797604fa1cda4aef3f250f465de54a0ca < 6ab9f61ca851f02ae4398cebaf00735a22e1d6ca`
- `Linux >= f3cc28c797604fa1cda4aef3f250f465de54a0ca < 632cd7b81cb7bab36112f02eb2ee7f7cc1214fb1`
- `Linux >= f3cc28c797604fa1cda4aef3f250f465de54a0ca < 79e2447b11322c27ef9ac423be0a94efc7691f02`
- `Linux >= f3cc28c797604fa1cda4aef3f250f465de54a0ca < 0f573b0576252d44fb27ab8470ea873bc6408ef3`
- `Linux >= f3cc28c797604fa1cda4aef3f250f465de54a0ca < 6285919d4c06254d257d24dc980f6332e1984a82`
- `Linux >= f3cc28c797604fa1cda4aef3f250f465de54a0ca < 43e746821f5f5afbbf68e388bf9fbe221e03bfca`
- `Linux 2.6.21`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.