What’s Vulnerable › Vulnerabilities

CVE-2026-98618: eth: fbnic: Handle maximum standalone channels

• Severity: unknown
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-10-18 · updated 2026-10-19

Description

In the Linux kernel, the following vulnerability has been resolved: eth: fbnic: Handle maximum standalone channels Standalone channels use one NAPI vector for each Tx and Rx queue. fbnic's allocation path excludes FBNIC_MAX_TXQS from that layout. A 64-Tx/64-Rx configuration therefore records 128 vectors but allocates only 64, leaving NULL entries that resource setup dereferences. Include the maximum vector count in standalone allocation.

Affected products

• Linux kernel: 6.11 — fixed in 7.3

How to fix

Upgrade to a fixed version: Linux kernel 7.3. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/16ff1023213cc39c1a7ce737205c2a1a53c3a716
• https://git.kernel.org/stable/c/1f4c73064a50f53d596c6f1d06d2d700f43c4b32
• https://git.kernel.org/stable/c/6c903188b67617070017305a325fa326f270a43d
• https://git.kernel.org/stable/c/9843e5fabd6ab296df9c025b1d0e5bf79a6b8a08

Get alerted when CVE-2026-98618 or the next vulnerability affects your stack