Live › vulnerability › CVE-2026-98585
Go to dashboardA Linux kernel driver for Meta's fbnic network hardware passed zero ring sizes through ethtool to a rounding function that is undefined for zero. The fix leaves zero unchanged so the existing minimum-size check rejects it.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Systems running the Linux kernel with the fbnic network driver loaded, which is only present on hosts with that Meta fbnic NIC hardware. The sources do not say what an attacker would need to trigger the flaw, and the impact is not described beyond undefined behavior. Hosts without fbnic hardware can skip it.
No product ranges from the sources yet.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
In the Linux kernel, the following vulnerability has been resolved:
eth: fbnic: Avoid rounding zero ring sizes
roundup_pow_of_two() is undefined for zero. ethtool permits a zero ring size to reach the driver, where the minimum-size check should reject it.
Leave zero unchanged while rounding nonzero ring sizes. The minimum-size check then rejects zero deterministically without changing the established behavior for other values.
This page as .md · .json · in your agent: get_signal("CVE-2026-98585")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.