In the Linux kernel, the following vulnerability has been resolved: net: atl1: fix soft lockup on out-of-range cmb_tpd_next_to_clean read Same issue… (CVE-2026-98494)
Description
A vulnerability in the Linux kernel's atl1 network driver caused a soft lockup due to an out-of-range read of cmb_tpd_next_to_clean. This occurs when the hardware reports an invalid value (0xffff) during PCIe link or MAC reset, causing an infinite loop in the driver. The issue has been resolved by treating the out-of-range value as indicating no new data to clean.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
The Linux kernel atl1 network driver had a flaw where the hardware could report an out-of-range cmb_tpd_next_to_clean value (0xffff) during PCIe link or MAC reset. This caused the driver loop to spin indefinitely, resulting in a soft lockup. The fix treats the out-of-range value as 'nothing new to clean,' preventing the infinite loop. This vulnerability is similar to a previously fixed issue in the atl1c driver.
Potential Impact
The vulnerability causes a soft lockup in the Linux kernel network driver, potentially leading to system instability or degraded network functionality during PCIe link or MAC reset events. There is no indication of code execution or privilege escalation from this issue.
Mitigation Recommendations
A fix for this vulnerability has been implemented in the Linux kernel. Users should apply the official kernel updates that include this patch to resolve the issue. No additional mitigation steps are indicated.
Technical Details
- Gcve Source
- db.gcve.eu
- Osv Id
- GHSA-9q2h-qvmx-46mv
- Osv Schema Version
- 1.4.0
- Aliases
- ["CVE-2026-98494"]
Threat ID: 6ad520b02cdf04f656993afd
Added to database: 10/18/2026, 19:40:32 UTC
Last enriched: 10/18/2026, 20:18:17 UTC
Last updated: 10/18/2026, 22:02:57 UTC
Views: 2
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.