{"schema":"threatline.record/2","record":{"id":"CVE-2026-97411","aliases":[],"summary":"net: ibm: emac: mal: fix potential system hang in mal_remove()","details":"In the Linux kernel, the following vulnerability has been resolved:\n\nnet: ibm: emac: mal: fix potential system hang in mal_remove()\n\nnapi_disable() is not idempotent and calling it on an already-disabled\nor unenabled NAPI context will cause the kernel to spin indefinitely\nwaiting for the NAPI_STATE_SCHED bit to clear.\n\nIn mal_remove(), napi_disable() is called unconditionally. If no MACs were\nregistered, NAPI was never enabled. Also, if they were registered but\nsubsequently unregistered, NAPI was already disabled in\nmal_unregister_commac(). In either case, calling napi_disable() causes\nthe kernel to hang upon module removal.\n\nFix this by only calling napi_disable() in mal_remove() if the commac list\nis not empty (which implies NAPI is enabled).","categories":["Operating systems"],"product":"Linux","vendor":"Linux","ecosystem":null,"affected_ranges":[{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97411","source_modified_at":"2026-10-03T10:58:04.560Z","fetched_at":"2026-10-23T18:52:38.922436Z","product":"Linux","vendor":"Linux","versions":[{"version":"b3e441c6ed8655a42e7b4da1b6dc7939f259d9c9","lessThan":"9c1c814a662d9c81959eba591bb52b24639390f2","status":"affected","versionType":"git"},{"version":"b3e441c6ed8655a42e7b4da1b6dc7939f259d9c9","lessThan":"34c4cae51718d6f393415e01c61314c1bde02f2e","status":"affected","versionType":"git"},{"version":"b3e441c6ed8655a42e7b4da1b6dc7939f259d9c9","lessThan":"62126e73e230cf4bd6c27cf201949c4290af84a1","status":"affected","versionType":"git"},{"version":"b3e441c6ed8655a42e7b4da1b6dc7939f259d9c9","lessThan":"f0399b3e212741bc5a64b8399d6266c4a150bdfe","status":"affected","versionType":"git"},{"version":"b3e441c6ed8655a42e7b4da1b6dc7939f259d9c9","lessThan":"f6c1aad9b35fa083f48ce0c5926204891d82e089","status":"affected","versionType":"git"},{"version":"b3e441c6ed8655a42e7b4da1b6dc7939f259d9c9","lessThan":"c4cb9a728df66c46067b26263f5beb633aae4087","status":"affected","versionType":"git"},{"version":"b3e441c6ed8655a42e7b4da1b6dc7939f259d9c9","lessThan":"7c5d41f87f079990bf241359e3c1332d8d10fe87","status":"affected","versionType":"git"}],"defaultStatus":"unaffected"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97411","source_modified_at":"2026-10-03T10:58:04.560Z","fetched_at":"2026-10-23T18:52:38.922436Z","product":"Linux","vendor":"Linux","versions":[{"version":"2.6.24","status":"affected"},{"version":"0","lessThan":"2.6.24","status":"unaffected","versionType":"semver"},{"version":"5.10.271","lessThanOrEqual":"5.10.*","status":"unaffected","versionType":"semver"},{"version":"5.15.222","lessThanOrEqual":"5.15.*","status":"unaffected","versionType":"semver"},{"version":"6.1.189","lessThanOrEqual":"6.1.*","status":"unaffected","versionType":"semver"},{"version":"6.6.158","lessThanOrEqual":"6.6.*","status":"unaffected","versionType":"semver"},{"version":"6.12.111","lessThanOrEqual":"6.12.*","status":"unaffected","versionType":"semver"},{"version":"6.18.53","lessThanOrEqual":"6.18.*","status":"unaffected","versionType":"semver"},{"version":"7.2","lessThanOrEqual":"*","status":"unaffected","versionType":"original_commit_for_fix"}],"defaultStatus":"affected"}],"fixed_versions":[{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97411","source_modified_at":"2026-10-03T10:58:04.560Z","fetched_at":"2026-10-23T18:52:38.922436Z","package":{"name":"Linux","ecosystem":null},"version":"9c1c814a662d9c81959eba591bb52b24639390f2","basis":"first unaffected version stated in the CVE record"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97411","source_modified_at":"2026-10-03T10:58:04.560Z","fetched_at":"2026-10-23T18:52:38.922436Z","package":{"name":"Linux","ecosystem":null},"version":"34c4cae51718d6f393415e01c61314c1bde02f2e","basis":"first unaffected version stated in the CVE record"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97411","source_modified_at":"2026-10-03T10:58:04.560Z","fetched_at":"2026-10-23T18:52:38.922436Z","package":{"name":"Linux","ecosystem":null},"version":"62126e73e230cf4bd6c27cf201949c4290af84a1","basis":"first unaffected version stated in the CVE record"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97411","source_modified_at":"2026-10-03T10:58:04.560Z","fetched_at":"2026-10-23T18:52:38.922436Z","package":{"name":"Linux","ecosystem":null},"version":"7c5d41f87f079990bf241359e3c1332d8d10fe87","basis":"first unaffected version stated in the CVE record"}],"cvss":null,"severity":null,"kev":{"listed":false},"epss":{"probability":0.00173,"percentile":0.06352,"score_date":"2026-10-23"},"published_at":"2026-09-24T16:03:17.967Z","modified_at":"2026-10-03T10:58:04.560Z","provenance":[{"source":"CVE List","url":"https://www.cve.org/CVERecord?id=CVE-2026-97411","fetched_at":"2026-10-23T18:52:38.922436Z","source_modified_at":"2026-10-03T10:58:04.560Z"},{"source":"EPSS","url":"https://api.first.org/data/v1/epss?cve=CVE-2026-97411","fetched_at":"2026-10-23T18:42:43.628194Z","source_modified_at":"2026-10-23"}],"sources":["CVE List","EPSS"],"references":[{"source":"CVE List","url":"https://git.kernel.org/stable/c/9c1c814a662d9c81959eba591bb52b24639390f2"},{"source":"CVE List","url":"https://git.kernel.org/stable/c/34c4cae51718d6f393415e01c61314c1bde02f2e"},{"source":"CVE List","url":"https://git.kernel.org/stable/c/62126e73e230cf4bd6c27cf201949c4290af84a1"},{"source":"CVE List","url":"https://git.kernel.org/stable/c/f0399b3e212741bc5a64b8399d6266c4a150bdfe"},{"source":"CVE List","url":"https://git.kernel.org/stable/c/f6c1aad9b35fa083f48ce0c5926204891d82e089"},{"source":"CVE List","url":"https://git.kernel.org/stable/c/c4cb9a728df66c46067b26263f5beb633aae4087"},{"source":"CVE List","url":"https://git.kernel.org/stable/c/7c5d41f87f079990bf241359e3c1332d8d10fe87"}],"locations":[],"motoko_assessment":{"status":"requires_architecture_review","automatic_remediation":false},"cve_state":"PUBLISHED","classification":{"method":"product-first software-layer rules","rules_version":"2.1","matched_on":"product","confidence":"heuristic","reviewed":false},"change_timestamp":"2026-10-03T10:58:04.560Z","content_hash":"ac3ef93daf80b7496b6474c1d851fc71e331d09088f5648caa358b5142f4cf2b"}}