CVE-2026-98488 PUBLISHED

net: atl1e: fix soft lockup on out-of-range hw_next_to_clean read

Assigner: Linux
Reserved: 25.09.2026 Published: 18.10.2026 Updated: 18.10.2026

In the Linux kernel, the following vulnerability has been resolved:

net: atl1e: fix soft lockup on out-of-range hw_next_to_clean read

Same issue as atl1c (see the first commit in this series, "net: atl1c: fix soft lockup on out-of-range tpd_cons read"): the hardware can report an out-of-range hw_next_to_clean (seen as 0xffff) while the PCIe link/MAC is resetting. An out-of-range value can never be reached and the loop below would spin forever. Treat it as "nothing new to clean" instead.

Product Status

Vendor Linux
Product Linux
Versions Default: unaffected
  • affected from a6a5325239c20202e18e21e94291bccc659fbf9e to ca862b1a4af7eac19429ca7ab92625f94ff4a46c (excl.)
  • affected from a6a5325239c20202e18e21e94291bccc659fbf9e to 4bbb44075bd3e773d61706882ab923ece8b3b519 (excl.)
  • affected from a6a5325239c20202e18e21e94291bccc659fbf9e to 34bc747a61bef572244b01b095552b629cd8d2a2 (excl.)
  • affected from a6a5325239c20202e18e21e94291bccc659fbf9e to 1d8c85359b5075c7937925b673add7ed00e57ec8 (excl.)
  • affected from a6a5325239c20202e18e21e94291bccc659fbf9e to a277422d194c62daa1b961f5f739689e53fe7301 (excl.)
  • affected from a6a5325239c20202e18e21e94291bccc659fbf9e to 4b7161804d8f31227551901f93947bb4eea4690b (excl.)
  • affected from a6a5325239c20202e18e21e94291bccc659fbf9e to 3a7d9271b37c80fb7db04aff3bc5621cfdaf9bee (excl.)
  • affected from a6a5325239c20202e18e21e94291bccc659fbf9e to 374bf9e4b90f979e052332c4faca2d745c491a12 (excl.)
Vendor Linux
Product Linux
Versions Default: affected
  • Version 2.6.27 is affected
  • unaffected from 0 to 2.6.27 (excl.)
  • unaffected from 5.10.271 to 5.10.* (incl.)
  • unaffected from 5.15.222 to 5.15.* (incl.)
  • unaffected from 6.1.189 to 6.1.* (incl.)
  • unaffected from 6.6.158 to 6.6.* (incl.)
  • unaffected from 6.12.112 to 6.12.* (incl.)
  • unaffected from 6.18.55 to 6.18.* (incl.)
  • unaffected from 7.2.9 to 7.2.* (incl.)
  • unaffected from 7.3-rc5 to * (incl.)

References