CVE-2026-98618
Linux: eth: fbnic: Handle maximum standalone channels
Linux LinuxOperating systemsCVSS
NoneNot scoredExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)0.20%Chance of exploitation activity in the next 30 days, higher than 9% of CVEs. Scored 23 Oct 2026FIRST EPSS
Fixed in9843e5fabd6ab296df9c025b1d0e5bf79a6b8a08Also 6c903188b67617070017305a325fa326f270a43d, 16ff1023213cc39c1a7ce737205c2a1a53c3a716 and 1 moreCVE List
What fixes it
- 9843e5fabd6ab296df9c025b1d0e5bf79a6b8a08LinuxCVE List
- 6c903188b67617070017305a325fa326f270a43dLinuxCVE List
- 16ff1023213cc39c1a7ce737205c2a1a53c3a716LinuxCVE List
- 1f4c73064a50f53d596c6f1d06d2d700f43c4b32LinuxCVE List
A fixed version on one release line is not the upgrade target for every line. Check your exact version and any vendor backports.
Description
In the Linux kernel, the following vulnerability has been resolved:
eth: fbnic: Handle maximum standalone channels
Standalone channels use one NAPI vector for each Tx and Rx queue. fbnic's allocation path excludes FBNIC_MAX_TXQS from that layout. A 64-Tx/64-Rx configuration therefore records 128 vectors but allocates only 64, leaving NULL entries that resource setup dereferences.
Include the maximum vector count in standalone allocation.
Text from CVE List
Affected versions 10
- Linuxaffected: bc6107771bb4be3009168cfda24d22131c026fe8 before 9843e5fabd6ab296df9c025b1d0e5bf79a6b8a08CVE List
- Linuxaffected: bc6107771bb4be3009168cfda24d22131c026fe8 before 6c903188b67617070017305a325fa326f270a43dCVE List
- Linuxaffected: bc6107771bb4be3009168cfda24d22131c026fe8 before 16ff1023213cc39c1a7ce737205c2a1a53c3a716CVE List
- Linuxaffected: bc6107771bb4be3009168cfda24d22131c026fe8 before 1f4c73064a50f53d596c6f1d06d2d700f43c4b32CVE List
- Linuxaffected: 6.11CVE List
- Linuxunaffected: all versions before 6.11CVE List
- Linuxunaffected: 6.12.112 through 6.12.*CVE List
- Linuxunaffected: 6.18.55 through 6.18.*CVE List
- Linuxunaffected: 7.2.9 through 7.2.*CVE List
- Linuxunaffected: 7.3CVE List
References 4
- git.kernel.org/stable/c/9843e5fabd6ab296df9c025b1d0e5bf79a6b8a08Referencevia CVE List
- git.kernel.org/stable/c/6c903188b67617070017305a325fa326f270a43dReferencevia CVE List
- git.kernel.org/stable/c/16ff1023213cc39c1a7ce737205c2a1a53c3a716Referencevia CVE List
- git.kernel.org/stable/c/1f4c73064a50f53d596c6f1d06d2d700f43c4b32Referencevia CVE List