What’s Vulnerable › Vulnerabilities

CVE-2026-98585: eth: fbnic: Avoid rounding zero ring sizes

• Severity: unknown
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-10-18 · updated 2026-10-19

Description

In the Linux kernel, the following vulnerability has been resolved: eth: fbnic: Avoid rounding zero ring sizes roundup_pow_of_two() is undefined for zero. ethtool permits a zero ring size to reach the driver, where the minimum-size check should reject it. Leave zero unchanged while rounding nonzero ring sizes. The minimum-size check then rejects zero deterministically without changing the established behavior for other values.

Affected products

• Linux kernel: 6.15 — fixed in 7.3

How to fix

Upgrade to a fixed version: Linux kernel 7.3. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/0160953d8eec75c3c55562158c46442ff1fd410b
• https://git.kernel.org/stable/c/491aa3167ae02f219cb2d2de6f4196d28dca03be
• https://git.kernel.org/stable/c/92c9f2ea634d92adff5403d231ebeda683c5685a

Get alerted when CVE-2026-98585 or the next vulnerability affects your stack