---
id: CVE-2026-98895
title: 'net/mlx5: HWS, Handle destroying table that has a miss table'
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  net/mlx5: HWS, Handle destroying table that has a miss table

  If a table has a miss table that was created by
  'mlx5hws_table_set_default_miss' API function, its miss_tb…
severity: high
cvss: 7
cvssVector: 'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H'
cvssSource: cna
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 <
    16b81428f7b5f253ab30a998bc4f4ecd1c8823f8
  - >-
    Linux >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 <
    6efdc212627cecf33b594256ae4460b4c52a126a
  - >-
    Linux >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 <
    60e9e82f162ab7399373ff2185119289e4f6dc06
  - Linux < 6.12.111
  - Linux < 6.18.53
  - Linux (all versions)
published: '2026-10-23'
updated: '2026-10-24'
sourceUpdated: '2026-10-24T14:09:29.070Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-98895'
references:
  - url: 'https://git.kernel.org/stable/c/16b81428f7b5f253ab30a998bc4f4ecd1c8823f8'
  - url: 'https://git.kernel.org/stable/c/6efdc212627cecf33b594256ae4460b4c52a126a'
  - url: 'https://git.kernel.org/stable/c/60e9e82f162ab7399373ff2185119289e4f6dc06'
tags:
  - cve.org
epss: 0.00206
epssPercentile: 0.10168
ingestedAt: '2026-10-23T13:24:55.577Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

net/mlx5: HWS, Handle destroying table that has a miss table

If a table has a miss table that was created by
'mlx5hws_table_set_default_miss' API function, its miss_tbl
keeps the table that points to it in a list.
If such table is deleted, we need to also remove it from the
miss_tbl list, otherwise the node in miss_tbl list will contain
garbage.

## Affected

- `Linux >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < 16b81428f7b5f253ab30a998bc4f4ecd1c8823f8`
- `Linux >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < 6efdc212627cecf33b594256ae4460b4c52a126a`
- `Linux >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < 60e9e82f162ab7399373ff2185119289e4f6dc06`
- `Linux < 6.12.111`
- `Linux < 6.18.53`
- `Linux (all versions)`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.