In the Linux kernel, the following vulnerability has been resolved: net: ethernet: mtk_eth_soc: allocate dummy netdev sooner The RX rings and the… (CVE-2026-98796)
Description
A vulnerability in the Linux kernel's MediaTek Ethernet driver (mtk_eth_soc) was resolved by changing the order of dummy net device allocation. The issue involved a timing window where network devices became visible before a shared NAPI and dummy device were initialized, causing null pointer dereferences and failures when bringing interfaces up. The fix allocates the dummy net device and adds the shared NAPI earlier during initialization, preventing these race conditions and ensuring proper cleanup on failure.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
The Linux kernel's mtk_eth_soc driver had a race condition where the RX rings and shared NAPI were associated with a dummy net device allocated too late during initialization. This allowed network devices to be brought up before the dummy device and shared NAPI existed, leading to null pointer dereferences in mtk_rx_alloc() and mtk_open(), causing warnings and open failures (-ENODEV). The fix moves dummy net device allocation and shared NAPI addition before registering MAC net devices, and improves error handling to unregister devices and cancel pending work properly on failure.
Potential Impact
The vulnerability could cause kernel warnings and failures to open network interfaces due to null pointer dereferences during device initialization. This may disrupt network interface availability and stability on affected MediaTek SoCs. There is no indication of remote code execution or privilege escalation from the provided data.
Mitigation Recommendations
A fix has been implemented that changes the initialization order to allocate the dummy net device and add the shared NAPI before registering MAC net devices. Users should apply the updated Linux kernel version containing this fix. No additional mitigation steps are indicated.
Technical Details
- Gcve Source
- db.gcve.eu
- Osv Id
- GHSA-vc65-jh42-gc6g
- Osv Schema Version
- 1.4.0
- Aliases
- ["CVE-2026-98796"]
Threat ID: 6ad520a92cdf04f6569938b2
Added to database: 10/18/2026, 19:40:25 UTC
Last enriched: 10/18/2026, 22:18:24 UTC
Last updated: 10/18/2026, 22:18:24 UTC
Views: 2
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.