Live › vulnerability › CVE-2026-98620
Go to dashboardWhen registering one of several MediaTek Ethernet devices fails during probe, the driver frees devices still marked as registered, which trips a kernel BUG check. The sources describe a kernel crash on a failed probe path, not code execution.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Systems running a Linux kernel with the MediaTek mtk_eth_soc Ethernet driver, typically MediaTek-based boards and routers, where multiple devices are probed. Systems without MediaTek Ethernet hardware do not load this driver and can skip it. The sources do not say whether a normal boot is ever hit, since the bug needs a register_netdev() failure.
No product ranges from the sources yet.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
In the Linux kernel, the following vulnerability has been resolved:
net: ethernet: mtk_eth_soc: unregister net_devices in case of probe failure
If register_netdev() fails for one of the MTK_MAX_DEVS devices in mtk_probe(), the error path jumps to err_deinit_ppe, skipping mtk_unreg_dev(). The previously registered net_devices are then freed by mtk_free_dev() while still in NETREG_REGISTERED state, hitting the BUG_ON(dev->reg_state != NETREG_UNREGISTERED).
Route the register_netdev() failure to err_unreg_netdev so the net_devices registered so far are properly unregistered before being freed.
This page as .md · .json · in your agent: get_signal("CVE-2026-98620")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.