---
id: CVE-2026-98630
title: 'eth: fbnic: Fix payload page pool error cleanup'
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  eth: fbnic: Fix payload page pool error cleanup

  The payload page pool pointer contains an error pointer when its
  allocation fails. The cleanup path passes that error p…
severity: none
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= 8a11010fdd9615e8dbb2f5d562ab88caa8a9516a <
    f4277b19edbc6abc9e1db7d6f6148608e8cb3c34
  - >-
    Linux >= 8a11010fdd9615e8dbb2f5d562ab88caa8a9516a <
    4bab07f7b74e59bb26032fa5ff6969d63e1c52ef
  - >-
    Linux >= 8a11010fdd9615e8dbb2f5d562ab88caa8a9516a <
    8e0b235bd918d06f54ba8fddd2c3ddc36ca59c15
  - Linux 6.18
published: '2026-10-18'
updated: '2026-10-18'
sourceUpdated: '2026-10-18T15:19:51.484Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-98630'
references:
  - url: 'https://git.kernel.org/stable/c/f4277b19edbc6abc9e1db7d6f6148608e8cb3c34'
  - url: 'https://git.kernel.org/stable/c/4bab07f7b74e59bb26032fa5ff6969d63e1c52ef'
  - url: 'https://git.kernel.org/stable/c/8e0b235bd918d06f54ba8fddd2c3ddc36ca59c15'
tags:
  - cve.org
ingestedAt: '2026-10-18T15:45:12.232Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

eth: fbnic: Fix payload page pool error cleanup

The payload page pool pointer contains an error pointer when its
allocation fails. The cleanup path passes that error pointer to
page_pool_destroy() instead of destroying the header page pool. This
can dereference the error pointer and leave the header page pool
allocated.

Destroy the header page pool instead.

## Affected

- `Linux >= 8a11010fdd9615e8dbb2f5d562ab88caa8a9516a < f4277b19edbc6abc9e1db7d6f6148608e8cb3c34`
- `Linux >= 8a11010fdd9615e8dbb2f5d562ab88caa8a9516a < 4bab07f7b74e59bb26032fa5ff6969d63e1c52ef`
- `Linux >= 8a11010fdd9615e8dbb2f5d562ab88caa8a9516a < 8e0b235bd918d06f54ba8fddd2c3ddc36ca59c15`
- `Linux 6.18`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
