CVE-2026-98618: eth: fbnic: Handle maximum standalone channels

Published Oct 18, 2026

Updated

In the Linux kernel, the following vulnerability has been resolved:

eth: fbnic: Handle maximum standalone channels

Standalone channels use one NAPI vector for each Tx and Rx queue. fbnic's allocation path excludes FBNICMAXTXQS from that layout. A 64-Tx/64-Rx configuration therefore records 128 vectors but allocates only 64, leaving NULL entries that resource setup dereferences.

Include the maximum vector count in standalone allocation.

Affected Software

1 affected component

Linux Linux kernel

Event History

Oct 18, 2026

CVE Published

via MITRE·03:19 PM

Data Sourced

via MITRE·03:19 PM

Description

Data Sourced

via NVD·04:17 PM

Description

Frequently Asked Questions

Which systems are exposed to this issue?

Systems using the Linux kernel fbnic Ethernet driver are affected when configured with the maximum standalone-channel layout of 64 transmit and 64 receive queues. The issue arises because that configuration requires 128 NAPI vectors while the affected allocation path allocates only 64.

What happens when the vulnerable configuration is used?

The driver leaves NULL entries in its recorded vector array, and later resource setup dereferences those entries. This can cause a failure during resource setup for the affected standalone-channel configuration.

What should be done if the fix cannot be applied immediately?

Avoid configuring fbnic for the maximum 64-Tx/64-Rx standalone-channel layout until the kernel includes the corrected vector allocation handling.

CVE-2026-98618: eth: fbnic: Handle maximum standalone channels

Affected Software

Event History

Frequently Asked Questions

Which systems are exposed to this issue?

What happens when the vulnerable configuration is used?

What should be done if the fix cannot be applied immediately?

Company

Resources

Contact

Frequently Asked Questions

Which systems are exposed to this issue?

What happens when the vulnerable configuration is used?

What should be done if the fix cannot be applied immediately?