---
id: CVE-2026-98618
title: 'eth: fbnic: Handle maximum standalone channels'
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  eth: fbnic: Handle maximum standalone channels

  Standalone channels use one NAPI vector for each Tx and Rx queue.
  fbnic's allocation path excludes FBNIC_MAX_TXQS from t…
severity: none
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= bc6107771bb4be3009168cfda24d22131c026fe8 <
    9843e5fabd6ab296df9c025b1d0e5bf79a6b8a08
  - >-
    Linux >= bc6107771bb4be3009168cfda24d22131c026fe8 <
    6c903188b67617070017305a325fa326f270a43d
  - >-
    Linux >= bc6107771bb4be3009168cfda24d22131c026fe8 <
    16ff1023213cc39c1a7ce737205c2a1a53c3a716
  - >-
    Linux >= bc6107771bb4be3009168cfda24d22131c026fe8 <
    1f4c73064a50f53d596c6f1d06d2d700f43c4b32
  - Linux 6.11
published: '2026-10-18'
updated: '2026-10-18'
sourceUpdated: '2026-10-18T15:19:38.631Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-98618'
references:
  - url: 'https://git.kernel.org/stable/c/9843e5fabd6ab296df9c025b1d0e5bf79a6b8a08'
  - url: 'https://git.kernel.org/stable/c/6c903188b67617070017305a325fa326f270a43d'
  - url: 'https://git.kernel.org/stable/c/16ff1023213cc39c1a7ce737205c2a1a53c3a716'
  - url: 'https://git.kernel.org/stable/c/1f4c73064a50f53d596c6f1d06d2d700f43c4b32'
tags:
  - cve.org
ingestedAt: '2026-10-18T15:45:12.238Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

eth: fbnic: Handle maximum standalone channels

Standalone channels use one NAPI vector for each Tx and Rx queue.
fbnic's allocation path excludes FBNIC_MAX_TXQS from that layout. A
64-Tx/64-Rx configuration therefore records 128 vectors but allocates
only 64, leaving NULL entries that resource setup dereferences.

Include the maximum vector count in standalone allocation.

## Affected

- `Linux >= bc6107771bb4be3009168cfda24d22131c026fe8 < 9843e5fabd6ab296df9c025b1d0e5bf79a6b8a08`
- `Linux >= bc6107771bb4be3009168cfda24d22131c026fe8 < 6c903188b67617070017305a325fa326f270a43d`
- `Linux >= bc6107771bb4be3009168cfda24d22131c026fe8 < 16ff1023213cc39c1a7ce737205c2a1a53c3a716`
- `Linux >= bc6107771bb4be3009168cfda24d22131c026fe8 < 1f4c73064a50f53d596c6f1d06d2d700f43c4b32`
- `Linux 6.11`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.