CVE-2026-98488
Published Oct 18, 2026
Description
In the Linux kernel, the following vulnerability has been resolved: net: atl1e: fix soft lockup on out-of-range hw_next_to_clean read Same issue as atl1c (see the first commit in this series, "net: atl1c: fix soft lockup on out-of-range tpd_cons read"): the hardware can report an out-of-range hw_next_to_clean (seen as 0xffff) while the PCIe link/MAC is resetting. An out-of-range value can never be reached and the loop below would spin forever. Treat it as "nothing new to clean" instead.
Is your site exposed to CVE-2026-98488?
Run a free security scan — no signup, results in seconds.
References
Other References
https://git.kernel.org/stable/c/1d8c85359b5075c7937925b673add7ed00e57ec8
https://git.kernel.org/stable/c/34bc747a61bef572244b01b095552b629cd8d2a2
https://git.kernel.org/stable/c/374bf9e4b90f979e052332c4faca2d745c491a12
https://git.kernel.org/stable/c/3a7d9271b37c80fb7db04aff3bc5621cfdaf9bee
https://git.kernel.org/stable/c/4b7161804d8f31227551901f93947bb4eea4690b
https://git.kernel.org/stable/c/4bbb44075bd3e773d61706882ab923ece8b3b519
https://git.kernel.org/stable/c/a277422d194c62daa1b961f5f739689e53fe7301
https://git.kernel.org/stable/c/ca862b1a4af7eac19429ca7ab92625f94ff4a46c
Frequently Asked Questions
What is CVE-2026-98488? +
In the Linux kernel, the following vulnerability has been resolved:
net: atl1e: fix soft lockup on out-of-range hw_next_to_clean read
Same issue as atl1c (see the first commit in this series, "net:
atl1c: fix soft lockup on out-of-range tpd_cons read"): the hardware
can report an out-of-range hw_next_to_clean (seen as 0xffff) while
the PCIe link/MAC is resetting. An out-of-range value can never be
reached and the loop below would spin forever. Treat it as "nothing
new to clean" instead.
How do I check if I'm vulnerable to CVE-2026-98488? +
You can use Secably's free Website Scanner to check your website for known vulnerabilities. For infrastructure scanning, use the Port Scanner to identify exposed services that may be affected. Check the vendor advisories linked above for specific patch and version information.