Live › vulnerability › CVE-2026-98488
Go to dashboardThe atl1e Ethernet driver in the Linux kernel can spin forever when the network card reports an impossible transmit-ring index during a PCIe link or MAC reset. The result is a soft lockup that stalls the CPU, a denial of service rather than code execution.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Systems running a Linux kernel with the atl1e driver, which supports Atheros L1E gigabit Ethernet adapters. Hosts without that hardware are not exposed to this driver path, and the sources do not say which kernel versions are affected.
No product ranges from the sources yet.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
In the Linux kernel, the following vulnerability has been resolved:
net: atl1e: fix soft lockup on out-of-range hw_next_to_clean read
Same issue as atl1c (see the first commit in this series, "net: atl1c: fix soft lockup on out-of-range tpd_cons read"): the hardware can report an out-of-range hw_next_to_clean (seen as 0xffff) while the PCIe link/MAC is resetting. An out-of-range value can never be reached and the loop below would spin forever. Treat it as "nothing new to clean" instead.
This page as .md · .json · in your agent: get_signal("CVE-2026-98488")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.