← Back to CVE Explorer

CVE-2026-98618

Full vulnerability record from the local CVENow database.

Description

In the Linux kernel, the following vulnerability has been resolved: eth: fbnic: Handle maximum standalone channels Standalone channels use one NAPI vector for each Tx and Rx queue. fbnic's allocation path excludes FBNIC_MAX_TXQS from that layout. A 64-Tx/64-Rx configuration therefore records 128 vectors but allocates only 64, leaving NULL entries that resource setup dereferences. Include the maximum vector count in standalone allocation.

Severity
Not scored
CVSS score
Not available
Vulnerability status
Received
Source identifier
416baaa9-dc9f-4396-8d5f-8c081fb06d67
Published
2026-10-18 16:17:14.690000
Last modified
2026-10-19 10:19:25.863000
View original CVE JSON
{
  "id": "CVE-2026-98618",
  "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
  "published": "2026-10-18T16:17:14.690",
  "lastModified": "2026-10-19T10:19:25.863",
  "vulnStatus": "Received",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "In the Linux kernel, the following vulnerability has been resolved:\n\neth: fbnic: Handle maximum standalone channels\n\nStandalone channels use one NAPI vector for each Tx and Rx queue.\nfbnic's allocation path excludes FBNIC_MAX_TXQS from that layout. A\n64-Tx/64-Rx configuration therefore records 128 vectors but allocates\nonly 64, leaving NULL entries that resource setup dereferences.\n\nInclude the maximum vector count in standalone allocation."
    }
  ],
  "affected": [
    {
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "affectedData": [
        {
          "vendor": "Linux",
          "product": "Linux",
          "defaultStatus": "unaffected",
          "programFiles": [
            "drivers/net/ethernet/meta/fbnic/fbnic_txrx.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "versions": [
            {
              "version": "bc6107771bb4be3009168cfda24d22131c026fe8",
              "lessThan": "9843e5fabd6ab296df9c025b1d0e5bf79a6b8a08",
              "versionType": "git",
              "status": "affected"
            },
            {
              "version": "bc6107771bb4be3009168cfda24d22131c026fe8",
              "lessThan": "6c903188b67617070017305a325fa326f270a43d",
              "versionType": "git",
              "status": "affected"
            },
            {
              "version": "bc6107771bb4be3009168cfda24d22131c026fe8",
              "lessThan": "16ff1023213cc39c1a7ce737205c2a1a53c3a716",
              "versionType": "git",
              "status": "affected"
            },
            {
              "version": "bc6107771bb4be3009168cfda24d22131c026fe8",
              "lessThan": "1f4c73064a50f53d596c6f1d06d2d700f43c4b32",
              "versionType": "git",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Linux",
          "product": "Linux",
          "defaultStatus": "affected",
          "programFiles": [
            "drivers/net/ethernet/meta/fbnic/fbnic_txrx.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "versions": [
            {
              "version": "6.11",
              "status": "affected"
            },
            {
              "version": "0",
              "lessThan": "6.11",
              "versionType": "semver",
              "status": "unaffected"
            },
            {
              "version": "6.12.112",
              "lessThanOrEqual": "6.12.*",
              "versionType": "semver",
              "status": "unaffected"
            },
            {
              "version": "6.18.55",
              "lessThanOrEqual": "6.18.*",
              "versionType": "semver",
              "status": "unaffected"
            },
            {
              "version": "7.2.9",
              "lessThanOrEqual": "7.2.*",
              "versionType": "semver",
              "status": "unaffected"
            },
            {
              "version": "7.3",
              "lessThanOrEqual": "*",
              "versionType": "original_commit_for_fix",
              "status": "unaffected"
            }
          ]
        }
      ]
    }
  ],
  "metrics": {},
  "references": [
    {
      "url": "https://git.kernel.org/stable/c/16ff1023213cc39c1a7ce737205c2a1a53c3a716",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/1f4c73064a50f53d596c6f1d06d2d700f43c4b32",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/6c903188b67617070017305a325fa326f270a43d",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/9843e5fabd6ab296df9c025b1d0e5bf79a6b8a08",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    }
  ]
}