All vulnerabilities
CVE-2026-98585

Linux: eth: fbnic: Avoid rounding zero ring sizes

Linux LinuxOperating systems
Open in ThreatlineRecord JSON
CVSS
NoneNot scored
ExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)0.17%Chance of exploitation activity in the next 30 days, higher than 5% of CVEs. Scored 23 Oct 2026FIRST EPSS
Fixed in92c9f2ea634d92adff5403d231ebeda683c5685aAlso 491aa3167ae02f219cb2d2de6f4196d28dca03be, 0160953d8eec75c3c55562158c46442ff1fd410bCVE List
Published18 Oct 2026Updated 19 Oct 2026CVE List

What fixes it

  • 92c9f2ea634d92adff5403d231ebeda683c5685aLinuxCVE List
  • 491aa3167ae02f219cb2d2de6f4196d28dca03beLinuxCVE List
  • 0160953d8eec75c3c55562158c46442ff1fd410bLinuxCVE List

A fixed version on one release line is not the upgrade target for every line. Check your exact version and any vendor backports.

Description

In the Linux kernel, the following vulnerability has been resolved:

eth: fbnic: Avoid rounding zero ring sizes

roundup_pow_of_two() is undefined for zero. ethtool permits a zero ring size to reach the driver, where the minimum-size check should reject it.

Leave zero unchanged while rounding nonzero ring sizes. The minimum-size check then rejects zero deterministically without changing the established behavior for other values.

Text from CVE List

Affected versions 8

  • Linuxaffected: 6cbf18a05c06090d867ef417a2a30b214d42d171 before 92c9f2ea634d92adff5403d231ebeda683c5685aCVE List
  • Linuxaffected: 6cbf18a05c06090d867ef417a2a30b214d42d171 before 491aa3167ae02f219cb2d2de6f4196d28dca03beCVE List
  • Linuxaffected: 6cbf18a05c06090d867ef417a2a30b214d42d171 before 0160953d8eec75c3c55562158c46442ff1fd410bCVE List
  • Linuxaffected: 6.15CVE List
  • Linuxunaffected: all versions before 6.15CVE List
  • Linuxunaffected: 6.18.55 through 6.18.*CVE List
  • Linuxunaffected: 7.2.9 through 7.2.*CVE List
  • Linuxunaffected: 7.3CVE List

References 3