In the Linux kernel, the following vulnerability has been resolved: eth: fbnic: use the Rx queue napi pointer to find the napi vector The queue… (CVE-2026-98617)

The Linux kernel fbnic Ethernet driver had a vulnerability where the Rx queue management incorrectly selected the NAPI vector by using an index-based modulo operation, which was only valid when no standalone Tx vectors existed. In cases with standalone Tx vectors, Rx queues pointed to Tx NAPI vectors, leading to potential use-after-free or invalid pointer dereferences during queue restarts or PCIe recovery. The fix involves using the napi pointer directly stored in netdev_rx_queue.napi, which is properly synchronized under the netdev instance lock, eliminating the incorrect indexing and preventing access to freed resources.

The vulnerability could lead to kernel instability or crashes due to dereferencing invalid or freed pointers in the network driver during queue restarts or PCIe recovery. This could impact system reliability and network functionality on affected Linux kernel versions using the fbnic driver. There is no indication of remote code execution or privilege escalation from the provided data.

A fix has been implemented in the Linux kernel to correct the NAPI vector mapping in the fbnic driver. Users should apply the official kernel updates that include this fix. Since this is a kernel-level issue, upgrading to a patched kernel version is the recommended remediation. No additional mitigations are indicated or required based on the vendor advisory.