CVE-2026-98630

Full vulnerability record from the local CVENow database.

Description

In the Linux kernel, the following vulnerability has been resolved: eth: fbnic: Fix payload page pool error cleanup The payload page pool pointer contains an error pointer when its allocation fails. The cleanup path passes that error pointer to page_pool_destroy() instead of destroying the header page pool. This can dereference the error pointer and leave the header page pool allocated. Destroy the header page pool instead.

Severity

Not scored

CVSS score

Not available

Vulnerability status

Received

Source identifier

416baaa9-dc9f-4396-8d5f-8c081fb06d67

Published

2026-10-18 16:17:16.080000

Last modified

2026-10-19 10:19:27.250000

View original CVE JSON

{
  "id": "CVE-2026-98630",
  "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
  "published": "2026-10-18T16:17:16.080",
  "lastModified": "2026-10-19T10:19:27.250",
  "vulnStatus": "Received",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "In the Linux kernel, the following vulnerability has been resolved:\n\neth: fbnic: Fix payload page pool error cleanup\n\nThe payload page pool pointer contains an error pointer when its\nallocation fails. The cleanup path passes that error pointer to\npage_pool_destroy() instead of destroying the header page pool. This\ncan dereference the error pointer and leave the header page pool\nallocated.\n\nDestroy the header page pool instead."
    }
  ],
  "affected": [
    {
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "affectedData": [
        {
          "vendor": "Linux",
          "product": "Linux",
          "defaultStatus": "unaffected",
          "programFiles": [
            "drivers/net/ethernet/meta/fbnic/fbnic_txrx.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "versions": [
            {
              "version": "8a11010fdd9615e8dbb2f5d562ab88caa8a9516a",
              "lessThan": "f4277b19edbc6abc9e1db7d6f6148608e8cb3c34",
              "versionType": "git",
              "status": "affected"
            },
            {
              "version": "8a11010fdd9615e8dbb2f5d562ab88caa8a9516a",
              "lessThan": "4bab07f7b74e59bb26032fa5ff6969d63e1c52ef",
              "versionType": "git",
              "status": "affected"
            },
            {
              "version": "8a11010fdd9615e8dbb2f5d562ab88caa8a9516a",
              "lessThan": "8e0b235bd918d06f54ba8fddd2c3ddc36ca59c15",
              "versionType": "git",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Linux",
          "product": "Linux",
          "defaultStatus": "affected",
          "programFiles": [
            "drivers/net/ethernet/meta/fbnic/fbnic_txrx.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "versions": [
            {
              "version": "6.18",
              "status": "affected"
            },
            {
              "version": "0",
              "lessThan": "6.18",
              "versionType": "semver",
              "status": "unaffected"
            },
            {
              "version": "6.18.55",
              "lessThanOrEqual": "6.18.*",
              "versionType": "semver",
              "status": "unaffected"
            },
            {
              "version": "7.2.9",
              "lessThanOrEqual": "7.2.*",
              "versionType": "semver",
              "status": "unaffected"
            },
            {
              "version": "7.3",
              "lessThanOrEqual": "*",
              "versionType": "original_commit_for_fix",
              "status": "unaffected"
            }
          ]
        }
      ]
    }
  ],
  "metrics": {},
  "references": [
    {
      "url": "https://git.kernel.org/stable/c/4bab07f7b74e59bb26032fa5ff6969d63e1c52ef",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/8e0b235bd918d06f54ba8fddd2c3ddc36ca59c15",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/f4277b19edbc6abc9e1db7d6f6148608e8cb3c34",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    }
  ]
}