{"id":"CVE-2026-98895","kind":"vulnerability","aliases":["CVE-2026-98895"],"related":[],"title":"Linux kernel mlx5 HWS: destroying a table with a miss table corrupts list","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nnet/mlx5: HWS, Handle destroying table that has a miss table\n\nIf a table has a miss table that was created by\n'mlx5hws_table_set_default_miss' API function, its miss_tbl\nkeeps the table that points to it in a list.\nIf such table is deleted, we need to also remove it from the\nmiss_tbl list, otherwise the node in miss_tbl list will contain\ngarbage.","summary":"In the Linux kernel's mlx5 driver (HWS), deleting a table that has a default miss table leaves a stale entry in the miss table's list. The sources do not describe an attacker gain beyond the resulting garbage list node.","severity":"unknown","cvss":null,"epss":0.00206,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["infrastructure","kernel","linux","mlx5","nvidia-connectx"],"not_affected_if":[],"how_to_check":null,"fix":null,"status":"open","published_at":"2026-10-23T12:18:23+00:00","first_seen_at":"2026-10-23T21:57:33+00:00","triaged_at":"2026-10-25T04:59:58+00:00","updated_at":"2026-10-25T12:38:50+00:00","category":"infrastructure","confidence":0.4,"triage":{"at":"2026-10-25T04:59:58Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"local","title":"Linux kernel mlx5 HWS: destroying a table with a miss table corrupts list","impact":"low","summary":"In the Linux kernel's mlx5 driver (HWS), deleting a table that has a default miss table leaves a stale entry in the miss table's list. The sources do not describe an attacker gain beyond the resulting garbage list node.","category":"infrastructure","nicknames":[],"who_cares":["linux","mlx5","nvidia-connectx","kernel"],"confidence":0.4,"needs_auth":"unknown","worst_case":"unknown; sources describe only a corrupted list node","analyst_note":"Check the NVD entry and the linked kernel stable commit for affected kernel versions, the fixed version, and whether the flaw is reachable beyond local privileged users.","how_to_check":"unknown","needs_analyst":true,"not_affected_if":[],"who_is_affected":"unknown","user_interaction":"unknown","needs_special_setup":"unknown","severity_if_unknown":"unknown"},"cost_usd":0.000522,"input_tokens":3366,"output_tokens":370,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-2026':15A,18A '-98895':16A,19A 'also':127C 'api':104C 'attack':60B 'beyond':62B 'connectx':26B 'contain':143C 'corrupt':12A 'creat':97C 'cve':14A,17A 'default':41B,102C 'delet':35B,123C 'describ':58B 'destroy':5A,81C 'driver':33B 'entri':47B 'follow':73C 'function':105C 'gain':61B 'garbag':65B,144C 'handl':80C 'hws':4A,34B,79C 'infrastructur':20B 'keep':109C 'kernel':2A,21B,30B,71C 'leav':44B 'linux':1A,22B,29B,70C 'list':13A,53B,66B,118C,134C,141C 'miss':10A,42B,50B,86C,93C,103C,107C,132C,139C 'mlx5':3A,23B,32B 'mlx5hws':99C 'need':125C 'net/mlx5':78C 'node':67B,137C 'nvidia':25B 'nvidia-connectx':24B 'otherwis':135C 'point':113C 'remov':128C 'resolv':77C 'result':64B 'set':101C 'sourc':55B 'stale':46B 'tabl':7A,11A,37B,43B,51B,82C,87C,90C,94C,100C,111C,121C 'tbl':108C,133C,140C 'vulner':74C","nicknames":[],"mitigations":[],"who_affected":null,"tier":"C","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-23T12:18:23+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-98895","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-98895","severity":null,"published_at":"2026-10-23T12:18:23+00:00","modified_at":"2026-10-23T12:18:23+00:00","first_seen_at":"2026-10-23T21:57:33+00:00","fetched_at":"2026-10-23T22:29:03+00:00","note":null},{"source":"epss","external_id":"CVE-2026-98895","url":"https://api.first.org/data/v1/epss?cve=CVE-2026-98895","severity":null,"published_at":null,"modified_at":null,"first_seen_at":"2026-10-25T12:38:50+00:00","fetched_at":"2026-10-25T12:38:50+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}