{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-98488", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "state": "PUBLISHED", "assignerShortName": "Linux", "dateReserved": "2026-09-25T10:25:14.352Z", "datePublished": "2026-10-18T15:16:14.168Z", "dateUpdated": "2026-10-19T09:20:25.516Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2026-10-19T09:20:25.516Z"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: atl1e: fix soft lockup on out-of-range hw_next_to_clean read\n\nSame issue as atl1c (see the first commit in this series, \"net:\natl1c: fix soft lockup on out-of-range tpd_cons read\"): the hardware\ncan report an out-of-range hw_next_to_clean (seen as 0xffff) while\nthe PCIe link/MAC is resetting. An out-of-range value can never be\nreached and the loop below would spin forever. Treat it as \"nothing\nnew to clean\" instead."}], "affected": [{"product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/net/ethernet/atheros/atl1e/atl1e_main.c"], "versions": [{"version": "a6a5325239c20202e18e21e94291bccc659fbf9e", "lessThan": "ca862b1a4af7eac19429ca7ab92625f94ff4a46c", "status": "affected", "versionType": "git"}, {"version": "a6a5325239c20202e18e21e94291bccc659fbf9e", "lessThan": "4bbb44075bd3e773d61706882ab923ece8b3b519", "status": "affected", "versionType": "git"}, {"version": "a6a5325239c20202e18e21e94291bccc659fbf9e", "lessThan": "34bc747a61bef572244b01b095552b629cd8d2a2", "status": "affected", "versionType": "git"}, {"version": "a6a5325239c20202e18e21e94291bccc659fbf9e", "lessThan": "1d8c85359b5075c7937925b673add7ed00e57ec8", "status": "affected", "versionType": "git"}, {"version": "a6a5325239c20202e18e21e94291bccc659fbf9e", "lessThan": "a277422d194c62daa1b961f5f739689e53fe7301", "status": "affected", "versionType": "git"}, {"version": "a6a5325239c20202e18e21e94291bccc659fbf9e", "lessThan": "4b7161804d8f31227551901f93947bb4eea4690b", "status": "affected", "versionType": "git"}, {"version": "a6a5325239c20202e18e21e94291bccc659fbf9e", "lessThan": "3a7d9271b37c80fb7db04aff3bc5621cfdaf9bee", "status": "affected", "versionType": "git"}, {"version": "a6a5325239c20202e18e21e94291bccc659fbf9e", "lessThan": "374bf9e4b90f979e052332c4faca2d745c491a12", "status": "affected", "versionType": "git"}]}, {"product": "Linux", "vendor": "Linux", "defaultStatus": "affected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/net/ethernet/atheros/atl1e/atl1e_main.c"], "versions": [{"version": "2.6.27", "status": "affected"}, {"version": "0", "lessThan": "2.6.27", "status": "unaffected", "versionType": "semver"}, {"version": "5.10.271", "lessThanOrEqual": "5.10.*", "status": "unaffected", "versionType": "semver"}, {"version": "5.15.222", "lessThanOrEqual": "5.15.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.1.189", "lessThanOrEqual": "6.1.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.6.158", "lessThanOrEqual": "6.6.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.12.112", "lessThanOrEqual": "6.12.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.18.55", "lessThanOrEqual": "6.18.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.2.9", "lessThanOrEqual": "7.2.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.3", "lessThanOrEqual": "*", "status": "unaffected", "versionType": "original_commit_for_fix"}]}], "cpeApplicability": [{"nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "2.6.27", "versionEndExcluding": "5.10.271"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "2.6.27", "versionEndExcluding": "5.15.222"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "2.6.27", "versionEndExcluding": "6.1.189"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "2.6.27", "versionEndExcluding": "6.6.158"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "2.6.27", "versionEndExcluding": "6.12.112"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "2.6.27", "versionEndExcluding": "6.18.55"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "2.6.27", "versionEndExcluding": "7.2.9"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "2.6.27", "versionEndExcluding": "7.3"}]}]}], "references": [{"url": "https://git.kernel.org/stable/c/ca862b1a4af7eac19429ca7ab92625f94ff4a46c"}, {"url": "https://git.kernel.org/stable/c/4bbb44075bd3e773d61706882ab923ece8b3b519"}, {"url": "https://git.kernel.org/stable/c/34bc747a61bef572244b01b095552b629cd8d2a2"}, {"url": "https://git.kernel.org/stable/c/1d8c85359b5075c7937925b673add7ed00e57ec8"}, {"url": "https://git.kernel.org/stable/c/a277422d194c62daa1b961f5f739689e53fe7301"}, {"url": "https://git.kernel.org/stable/c/4b7161804d8f31227551901f93947bb4eea4690b"}, {"url": "https://git.kernel.org/stable/c/3a7d9271b37c80fb7db04aff3bc5621cfdaf9bee"}, {"url": "https://git.kernel.org/stable/c/374bf9e4b90f979e052332c4faca2d745c491a12"}], "title": "net: atl1e: fix soft lockup on out-of-range hw_next_to_clean read", "x_generator": {"engine": "bippy-1.2.0"}}}}

{}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "Linux", "programFiles": ["drivers/net/ethernet/atheros/atl1e/atl1e_main.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"lessThan": "ca862b1a4af7eac19429ca7ab92625f94ff4a46c", "status": "affected", "version": "a6a5325239c20202e18e21e94291bccc659fbf9e", "versionType": "git"}, {"lessThan": "4bbb44075bd3e773d61706882ab923ece8b3b519", "status": "affected", "version": "a6a5325239c20202e18e21e94291bccc659fbf9e", "versionType": "git"}, {"lessThan": "34bc747a61bef572244b01b095552b629cd8d2a2", "status": "affected", "version": "a6a5325239c20202e18e21e94291bccc659fbf9e", "versionType": "git"}, {"lessThan": "1d8c85359b5075c7937925b673add7ed00e57ec8", "status": "affected", "version": "a6a5325239c20202e18e21e94291bccc659fbf9e", "versionType": "git"}, {"lessThan": "a277422d194c62daa1b961f5f739689e53fe7301", "status": "affected", "version": "a6a5325239c20202e18e21e94291bccc659fbf9e", "versionType": "git"}, {"lessThan": "4b7161804d8f31227551901f93947bb4eea4690b", "status": "affected", "version": "a6a5325239c20202e18e21e94291bccc659fbf9e", "versionType": "git"}, {"lessThan": "3a7d9271b37c80fb7db04aff3bc5621cfdaf9bee", "status": "affected", "version": "a6a5325239c20202e18e21e94291bccc659fbf9e", "versionType": "git"}, {"lessThan": "374bf9e4b90f979e052332c4faca2d745c491a12", "status": "affected", "version": "a6a5325239c20202e18e21e94291bccc659fbf9e", "versionType": "git"}]}, {"defaultStatus": "affected", "product": "Linux", "programFiles": ["drivers/net/ethernet/atheros/atl1e/atl1e_main.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"status": "affected", "version": "2.6.27"}, {"lessThan": "2.6.27", "status": "unaffected", "version": "0", "versionType": "semver"}, {"lessThanOrEqual": "5.10.*", "status": "unaffected", "version": "5.10.271", "versionType": "semver"}, {"lessThanOrEqual": "5.15.*", "status": "unaffected", "version": "5.15.222", "versionType": "semver"}, {"lessThanOrEqual": "6.1.*", "status": "unaffected", "version": "6.1.189", "versionType": "semver"}, {"lessThanOrEqual": "6.6.*", "status": "unaffected", "version": "6.6.158", "versionType": "semver"}, {"lessThanOrEqual": "6.12.*", "status": "unaffected", "version": "6.12.112", "versionType": "semver"}, {"lessThanOrEqual": "6.18.*", "status": "unaffected", "version": "6.18.55", "versionType": "semver"}, {"lessThanOrEqual": "7.2.*", "status": "unaffected", "version": "7.2.9", "versionType": "semver"}, {"lessThanOrEqual": "*", "status": "unaffected", "version": "7.3", "versionType": "original_commit_for_fix"}]}], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: atl1e: fix soft lockup on out-of-range hw_next_to_clean read\n\nSame issue as atl1c (see the first commit in this series, \"net:\natl1c: fix soft lockup on out-of-range tpd_cons read\"): the hardware\ncan report an out-of-range hw_next_to_clean (seen as 0xffff) while\nthe PCIe link/MAC is resetting. An out-of-range value can never be\nreached and the loop below would spin forever. Treat it as \"nothing\nnew to clean\" instead."}], "id": "CVE-2026-98488", "lastModified": "2026-10-19T10:19:00.483", "metrics": {}, "published": "2026-10-18T16:16:59.613", "references": [{"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/1d8c85359b5075c7937925b673add7ed00e57ec8"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/34bc747a61bef572244b01b095552b629cd8d2a2"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/374bf9e4b90f979e052332c4faca2d745c491a12"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/3a7d9271b37c80fb7db04aff3bc5621cfdaf9bee"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/4b7161804d8f31227551901f93947bb4eea4690b"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/4bbb44075bd3e773d61706882ab923ece8b3b519"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/a277422d194c62daa1b961f5f739689e53fe7301"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/ca862b1a4af7eac19429ca7ab92625f94ff4a46c"}], "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "vulnStatus": "Received"}

{"bugzilla": {"description": "kernel: net: atl1e: fix soft lockup on out-of-range hw_next_to_clean read", "id": "2554888", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2554888"}, "csaw": false, "cvss3": {"cvss3_base_score": "4.1", "cvss3_scoring_vector": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H", "status": "draft"}, "cwe": "CWE-835", "details": ["In the Linux kernel, the following vulnerability has been resolved:\nnet: atl1e: fix soft lockup on out-of-range hw_next_to_clean read\nSame issue as atl1c (see the first commit in this series, \"net:\natl1c: fix soft lockup on out-of-range tpd_cons read\"): the hardware\ncan report an out-of-range hw_next_to_clean (seen as 0xffff) while\nthe PCIe link/MAC is resetting. An out-of-range value can never be\nreached and the loop below would spin forever. Treat it as \"nothing\nnew to clean\" instead.", "A flaw was found in the Linux kernel's Atheros L1E Gigabit Ethernet (atl1e) network driver. While the network interface hardware is resetting, it can report an unexpected out-of-range status value during transmit packet processing. Because the driver does not properly validate this value, it enters an infinite loop waiting for an unreachable condition, resulting in a soft lockup. This failure causes a Denial of Service (DoS), making the affected system unresponsive."], "name": "CVE-2026-98488", "package_state": [{"cpe": "cpe:/o:redhat:enterprise_linux:10", "fix_state": "Fix deferred", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 10"}, {"cpe": "cpe:/o:redhat:enterprise_linux:6", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 6"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Fix deferred", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Fix deferred", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Fix deferred", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Fix deferred", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Fix deferred", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 9"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Fix deferred", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 9"}, {"cpe": "cpe:/a:redhat:openshift:4", "fix_state": "Fix deferred", "package_name": "openshift/ose-rhel-coreos-8", "product_name": "Red Hat OpenShift Container Platform 4"}, {"cpe": "cpe:/a:redhat:openshift:4", "fix_state": "Fix deferred", "package_name": "openshift/ose-rhel-coreos-9", "product_name": "Red Hat OpenShift Container Platform 4"}], "public_date": "2026-10-18T00:00:00Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2026-98488\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-98488\nhttps://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2026/CVE-2026-98488.mbox"], "threat_severity": "Moderate"}