All vulnerabilities
CVE-2026-98630

Linux: eth: fbnic: Fix payload page pool error cleanup

Linux LinuxOperating systems
Open in ThreatlineRecord JSON
CVSS
NoneNot scored
ExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)0.20%Chance of exploitation activity in the next 30 days, higher than 9% of CVEs. Scored 23 Oct 2026FIRST EPSS
Fixed in4bab07f7b74e59bb26032fa5ff6969d63e1c52efAlso 8e0b235bd918d06f54ba8fddd2c3ddc36ca59c15CVE List
Published18 Oct 2026Updated 19 Oct 2026CVE List

What fixes it

  • 4bab07f7b74e59bb26032fa5ff6969d63e1c52efLinuxCVE List
  • 8e0b235bd918d06f54ba8fddd2c3ddc36ca59c15LinuxCVE List

A fixed version on one release line is not the upgrade target for every line. Check your exact version and any vendor backports.

Description

In the Linux kernel, the following vulnerability has been resolved:

eth: fbnic: Fix payload page pool error cleanup

The payload page pool pointer contains an error pointer when its allocation fails. The cleanup path passes that error pointer to page_pool_destroy() instead of destroying the header page pool. This can dereference the error pointer and leave the header page pool allocated.

Destroy the header page pool instead.

Text from CVE List

Affected versions 8

  • Linuxaffected: 8a11010fdd9615e8dbb2f5d562ab88caa8a9516a before f4277b19edbc6abc9e1db7d6f6148608e8cb3c34CVE List
  • Linuxaffected: 8a11010fdd9615e8dbb2f5d562ab88caa8a9516a before 4bab07f7b74e59bb26032fa5ff6969d63e1c52efCVE List
  • Linuxaffected: 8a11010fdd9615e8dbb2f5d562ab88caa8a9516a before 8e0b235bd918d06f54ba8fddd2c3ddc36ca59c15CVE List
  • Linuxaffected: 6.18CVE List
  • Linuxunaffected: all versions before 6.18CVE List
  • Linuxunaffected: 6.18.55 through 6.18.*CVE List
  • Linuxunaffected: 7.2.9 through 7.2.*CVE List
  • Linuxunaffected: 7.3CVE List

References 3