Live › vulnerability › CVE-2026-98494
Go to dashboardThe atl1 Ethernet driver in the Linux kernel can spin forever in a loop when the hardware reports an out-of-range transmit-cleanup index during a PCIe link or MAC reset. The fix treats such a value as nothing new to clean, so the kernel no longer hangs.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Systems running a Linux kernel that includes the atl1 Ethernet driver (Atheros L1 NICs) and that have not yet received the upstream fix. The sources do not give affected kernel version ranges or say how often the hardware reports this value. Hosts without atl1 hardware are not affected.
No product ranges from the sources yet.
Unknown from the sources.
Unknown from the sources.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
In the Linux kernel, the following vulnerability has been resolved:
net: atl1: fix soft lockup on out-of-range cmb_tpd_next_to_clean read
Same issue as atl1c (see the first commit in this series, "net: atl1c: fix soft lockup on out-of-range tpd_cons read"): the hardware can report an out-of-range cmb_tpd_next_to_clean (seen as 0xffff) while the PCIe link/MAC is resetting. An out-of-range value can never be reached and the loop below would spin forever. Treat it as "nothing new to clean" instead.
This page as .md · .json · in your agent: get_signal("CVE-2026-98494")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.