CVE-2026-98488

net: atl1e: fix soft lockup on out-of-range hw_next_to_clean read

State: Published
Severity: Not scored
Published: Oct 18, 2026
Updated: Oct 19, 2026
Reserved: Sep 25, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

net: atl1e: fix soft lockup on out-of-range hw_next_to_clean read

Same issue as atl1c (see the first commit in this series, "net: atl1c: fix soft lockup on out-of-range tpd_cons read"): the hardware can report an out-of-range hw_next_to_clean (seen as 0xffff) while the PCIe link/MAC is resetting. An out-of-range value can never be reached and the loop below would spin forever. Treat it as "nothing new to clean" instead.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	a6a5325239c20202e18e21e94291bccc659fbf9e to before ca862b1a4af7eac19429ca7ab92625f94ff4a46cAffected a6a5325239c20202e18e21e94291bccc659fbf9e to before 4bbb44075bd3e773d61706882ab923ece8b3b519Affected a6a5325239c20202e18e21e94291bccc659fbf9e to before 34bc747a61bef572244b01b095552b629cd8d2a2Affected a6a5325239c20202e18e21e94291bccc659fbf9e to before 1d8c85359b5075c7937925b673add7ed00e57ec8Affected a6a5325239c20202e18e21e94291bccc659fbf9e to before a277422d194c62daa1b961f5f739689e53fe7301Affected a6a5325239c20202e18e21e94291bccc659fbf9e to before 4b7161804d8f31227551901f93947bb4eea4690bAffected a6a5325239c20202e18e21e94291bccc659fbf9e to before 3a7d9271b37c80fb7db04aff3bc5621cfdaf9beeAffected a6a5325239c20202e18e21e94291bccc659fbf9e to before 374bf9e4b90f979e052332c4faca2d745c491a12Affected
LinuxLinux	2.6.27Affected before 2.6.27Not affected 5.10.271 through 5.10.Not affected 5.15.222 through 5.15.Not affected 6.1.189 through 6.1.Not affected 6.6.158 through 6.6.Not affected 6.12.112 through 6.12.Not affected 6.18.55 through 6.18.Not affected 7.2.9 through 7.2.*Not affected 7.3 and laterNot affected

Product

Versions

LinuxLinux

a6a5325239c20202e18e21e94291bccc659fbf9e to before ca862b1a4af7eac19429ca7ab92625f94ff4a46cAffected
a6a5325239c20202e18e21e94291bccc659fbf9e to before 4bbb44075bd3e773d61706882ab923ece8b3b519Affected
a6a5325239c20202e18e21e94291bccc659fbf9e to before 34bc747a61bef572244b01b095552b629cd8d2a2Affected
a6a5325239c20202e18e21e94291bccc659fbf9e to before 1d8c85359b5075c7937925b673add7ed00e57ec8Affected
a6a5325239c20202e18e21e94291bccc659fbf9e to before a277422d194c62daa1b961f5f739689e53fe7301Affected
a6a5325239c20202e18e21e94291bccc659fbf9e to before 4b7161804d8f31227551901f93947bb4eea4690bAffected
a6a5325239c20202e18e21e94291bccc659fbf9e to before 3a7d9271b37c80fb7db04aff3bc5621cfdaf9beeAffected
a6a5325239c20202e18e21e94291bccc659fbf9e to before 374bf9e4b90f979e052332c4faca2d745c491a12Affected

LinuxLinux

2.6.27Affected
before 2.6.27Not affected
5.10.271 through 5.10.*Not affected
5.15.222 through 5.15.*Not affected
6.1.189 through 6.1.*Not affected
6.6.158 through 6.6.*Not affected
6.12.112 through 6.12.*Not affected
6.18.55 through 6.18.*Not affected
7.2.9 through 7.2.*Not affected
7.3 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.