CVE-2026-98494 PUBLISHED

net: atl1: fix soft lockup on out-of-range cmb_tpd_next_to_clean read

Assigner: Linux
Reserved: 25.09.2026 Published: 18.10.2026 Updated: 18.10.2026

In the Linux kernel, the following vulnerability has been resolved:

net: atl1: fix soft lockup on out-of-range cmb_tpd_next_to_clean read

Same issue as atl1c (see the first commit in this series, "net: atl1c: fix soft lockup on out-of-range tpd_cons read"): the hardware can report an out-of-range cmb_tpd_next_to_clean (seen as 0xffff) while the PCIe link/MAC is resetting. An out-of-range value can never be reached and the loop below would spin forever. Treat it as "nothing new to clean" instead.

Product Status

Vendor Linux
Product Linux
Versions Default: unaffected
  • affected from f3cc28c797604fa1cda4aef3f250f465de54a0ca to 5d7ac337d37cb97d77e4c910d37746694b606661 (excl.)
  • affected from f3cc28c797604fa1cda4aef3f250f465de54a0ca to c55e51d5899e80f9593b26985ed0b89e0c828a5e (excl.)
  • affected from f3cc28c797604fa1cda4aef3f250f465de54a0ca to 6ab9f61ca851f02ae4398cebaf00735a22e1d6ca (excl.)
  • affected from f3cc28c797604fa1cda4aef3f250f465de54a0ca to 632cd7b81cb7bab36112f02eb2ee7f7cc1214fb1 (excl.)
  • affected from f3cc28c797604fa1cda4aef3f250f465de54a0ca to 79e2447b11322c27ef9ac423be0a94efc7691f02 (excl.)
  • affected from f3cc28c797604fa1cda4aef3f250f465de54a0ca to 0f573b0576252d44fb27ab8470ea873bc6408ef3 (excl.)
  • affected from f3cc28c797604fa1cda4aef3f250f465de54a0ca to 6285919d4c06254d257d24dc980f6332e1984a82 (excl.)
  • affected from f3cc28c797604fa1cda4aef3f250f465de54a0ca to 43e746821f5f5afbbf68e388bf9fbe221e03bfca (excl.)
Vendor Linux
Product Linux
Versions Default: affected
  • Version 2.6.21 is affected
  • unaffected from 0 to 2.6.21 (excl.)
  • unaffected from 5.10.271 to 5.10.* (incl.)
  • unaffected from 5.15.222 to 5.15.* (incl.)
  • unaffected from 6.1.189 to 6.1.* (incl.)
  • unaffected from 6.6.158 to 6.6.* (incl.)
  • unaffected from 6.12.112 to 6.12.* (incl.)
  • unaffected from 6.18.55 to 6.18.* (incl.)
  • unaffected from 7.2.9 to 7.2.* (incl.)
  • unaffected from 7.3-rc5 to * (incl.)

References