CVE-2026-98791None▾ SunlitIn the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fix AF_XDP TX timestamp teardown NULL dereference During XSK TX queue teardown, outstanding descriptors are completed without a CQE. If one requested a TX t…
▾ Sunlit zone — Low / medium · no exploitation signal
impact 2.8 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
In the Linux kernel, the following vulnerability has been resolved:
net/mlx5e: Fix AF_XDP TX timestamp teardown NULL dereference
During XSK TX queue teardown, outstanding descriptors are completed without a CQE. If one requested a TX timestamp, the completion path passes that NULL CQE to mlx5e_xsk_fill_timestamp(), which dereferences it.
Return zero when no CQE is available, indicating that teardown did not produce a TX timestamp.
Linux >= ec706a860eba99bf934d59f74b5db90af44e882e < fce70b6bf9f3261e887419a4e7caa25b80fa9d55Linux >= ec706a860eba99bf934d59f74b5db90af44e882e < f81d40e2eb69552334f510114f3e6edd0d43178bLinux >= ec706a860eba99bf934d59f74b5db90af44e882e < 63df0ef4c6e3105589e6bb2e758ce611b0ada86cLinux >= ec706a860eba99bf934d59f74b5db90af44e882e < 7b97273cbebe9dd4fddc457f0c4f2a124d0e3996Linux 6.8Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-98768Noneusb: typec: anx7411 - stop the IRQ before destroying the workqueue
CVE-2026-98770Noneusb: gadget: midi2: Fix the jack descriptor array sizes
CVE-2026-98769Noneusb: gadget: f_uac1_legacy: validate bRequest index in generic_{set,get}_cmd
CVE-2026-98774Nonerust_binder: cancel deferred work items in thread exit
CVE-2026-98772NoneUSB: serial: fix port tear down use-after-free
CVE-2026-98771Noneusb: storage: sierra_ms: reject short SWoC info transfers