CVE-2026-97411

net: ibm: emac: mal: fix potential system hang in mal_remove()

State: Published
Severity: Not scored
Published: Sep 24, 2026
Updated: Oct 3, 2026
Reserved: Sep 24, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

net: ibm: emac: mal: fix potential system hang in mal_remove()

napi_disable() is not idempotent and calling it on an already-disabled or unenabled NAPI context will cause the kernel to spin indefinitely waiting for the NAPI_STATE_SCHED bit to clear.

In mal_remove(), napi_disable() is called unconditionally. If no MACs were registered, NAPI was never enabled. Also, if they were registered but subsequently unregistered, NAPI was already disabled in mal_unregister_commac(). In either case, calling napi_disable() causes the kernel to hang upon module removal.

Fix this by only calling napi_disable() in mal_remove() if the commac list is not empty (which implies NAPI is enabled).

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	b3e441c6ed8655a42e7b4da1b6dc7939f259d9c9 to before 9c1c814a662d9c81959eba591bb52b24639390f2Affected b3e441c6ed8655a42e7b4da1b6dc7939f259d9c9 to before 34c4cae51718d6f393415e01c61314c1bde02f2eAffected b3e441c6ed8655a42e7b4da1b6dc7939f259d9c9 to before 62126e73e230cf4bd6c27cf201949c4290af84a1Affected b3e441c6ed8655a42e7b4da1b6dc7939f259d9c9 to before f0399b3e212741bc5a64b8399d6266c4a150bdfeAffected b3e441c6ed8655a42e7b4da1b6dc7939f259d9c9 to before f6c1aad9b35fa083f48ce0c5926204891d82e089Affected b3e441c6ed8655a42e7b4da1b6dc7939f259d9c9 to before c4cb9a728df66c46067b26263f5beb633aae4087Affected b3e441c6ed8655a42e7b4da1b6dc7939f259d9c9 to before 7c5d41f87f079990bf241359e3c1332d8d10fe87Affected
LinuxLinux	2.6.24Affected before 2.6.24Not affected 5.10.271 through 5.10.Not affected 5.15.222 through 5.15.Not affected 6.1.189 through 6.1.Not affected 6.6.158 through 6.6.Not affected 6.12.111 through 6.12.Not affected 6.18.53 through 6.18.Not affected 7.2 and laterNot affected

Product

Versions

LinuxLinux

b3e441c6ed8655a42e7b4da1b6dc7939f259d9c9 to before 9c1c814a662d9c81959eba591bb52b24639390f2Affected
b3e441c6ed8655a42e7b4da1b6dc7939f259d9c9 to before 34c4cae51718d6f393415e01c61314c1bde02f2eAffected
b3e441c6ed8655a42e7b4da1b6dc7939f259d9c9 to before 62126e73e230cf4bd6c27cf201949c4290af84a1Affected
b3e441c6ed8655a42e7b4da1b6dc7939f259d9c9 to before f0399b3e212741bc5a64b8399d6266c4a150bdfeAffected
b3e441c6ed8655a42e7b4da1b6dc7939f259d9c9 to before f6c1aad9b35fa083f48ce0c5926204891d82e089Affected
b3e441c6ed8655a42e7b4da1b6dc7939f259d9c9 to before c4cb9a728df66c46067b26263f5beb633aae4087Affected
b3e441c6ed8655a42e7b4da1b6dc7939f259d9c9 to before 7c5d41f87f079990bf241359e3c1332d8d10fe87Affected

LinuxLinux

2.6.24Affected
before 2.6.24Not affected
5.10.271 through 5.10.*Not affected
5.15.222 through 5.15.*Not affected
6.1.189 through 6.1.*Not affected
6.6.158 through 6.6.*Not affected
6.12.111 through 6.12.*Not affected
6.18.53 through 6.18.*Not affected
7.2 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.