Riskcovery

CVE-2026-98791

net/mlx5e: Fix AF_XDP TX timestamp teardown NULL dereference

State
Published
Severity
Not scored
Published
Oct 18, 2026
Updated
Oct 19, 2026
Reserved
Sep 25, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

net/mlx5e: Fix AF_XDP TX timestamp teardown NULL dereference

During XSK TX queue teardown, outstanding descriptors are completed without a CQE. If one requested a TX timestamp, the completion path passes that NULL CQE to mlx5e_xsk_fill_timestamp(), which dereferences it.

Return zero when no CQE is available, indicating that teardown did not produce a TX timestamp.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • ec706a860eba99bf934d59f74b5db90af44e882e to before fce70b6bf9f3261e887419a4e7caa25b80fa9d55Affected
  • ec706a860eba99bf934d59f74b5db90af44e882e to before f81d40e2eb69552334f510114f3e6edd0d43178bAffected
  • ec706a860eba99bf934d59f74b5db90af44e882e to before 63df0ef4c6e3105589e6bb2e758ce611b0ada86cAffected
  • ec706a860eba99bf934d59f74b5db90af44e882e to before 7b97273cbebe9dd4fddc457f0c4f2a124d0e3996Affected
LinuxLinux
  • 6.8Affected
  • before 6.8Not affected
  • 6.12.113 through 6.12.*Not affected
  • 6.18.56 through 6.18.*Not affected
  • 7.2.10 through 7.2.*Not affected
  • 7.3 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.