CVE-2026-98488
Estado: RecibidaSin puntuar—
Gravedad—Sin puntuar
Probabilidad de explotación0.21 %mayor que el 11 % de las CVE
Explotación activaNono figura en el catálogo de CISA
Exploit públicoNo conocidosin código público localizado
En el kernel de Linux se ha resuelto la siguiente vulnerabilidad:
net: atl1e: corrige el bloqueo blando por una lectura fuera de rango de hw_next_to_clean
Es el mismo problema que en atl1c (véase el primer commit de esta serie, "net: atl1c: fix soft lockup on out-of-range tpd_cons read"): el hardware puede informar de un hw_next_to_clean fuera de rango (se ha observado 0xffff) mientras el enlace/MAC de PCIe se reinicia. Un valor fuera de rango nunca puede alcanzarse y el bucle siguiente giraría indefinidamente. Se trata en su lugar como "no hay nada nuevo que limpiar".
Traducción automática del texto original de NVD (en inglés).
CVSS
NVD no ha asignado puntuación CVSS a esta CVE (habitual desde el cambio de política de abril de 2026).
Probabilidad de explotación (EPSS)
- Probabilidad de explotación en los próximos 30 días
- 0.21 %
- Percentil entre todas las CVEs puntuadas
- 11
- Fecha de la puntuación
- 20/10/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
Tecnologías afectadas (1)
⚠ Inferidas por IA a partir de la descripción — NVD aún no ha analizado esta CVE; no son CPE verificados.
Referencias
Mostrar las 8 referencias
- https://git.kernel.org/stable/c/1d8c85359b5075c7937925b673add7ed00e57ec8
- https://git.kernel.org/stable/c/34bc747a61bef572244b01b095552b629cd8d2a2
- https://git.kernel.org/stable/c/374bf9e4b90f979e052332c4faca2d745c491a12
- https://git.kernel.org/stable/c/3a7d9271b37c80fb7db04aff3bc5621cfdaf9bee
- https://git.kernel.org/stable/c/4b7161804d8f31227551901f93947bb4eea4690b
- https://git.kernel.org/stable/c/4bbb44075bd3e773d61706882ab923ece8b3b519
- https://git.kernel.org/stable/c/a277422d194c62daa1b961f5f739689e53fe7301
- https://git.kernel.org/stable/c/ca862b1a4af7eac19429ca7ab92625f94ff4a46c
JSON original (NVD)
Mostrar
{
"id": "CVE-2026-98488",
"cveTags": [],
"metrics": {},
"affected": [
{
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"affectedData": [
{
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"vendor": "Linux",
"product": "Linux",
"versions": [
{
"status": "affected",
"version": "a6a5325239c20202e18e21e94291bccc659fbf9e",
"lessThan": "ca862b1a4af7eac19429ca7ab92625f94ff4a46c",
"versionType": "git"
},
{
"status": "affected",
"version": "a6a5325239c20202e18e21e94291bccc659fbf9e",
"lessThan": "4bbb44075bd3e773d61706882ab923ece8b3b519",
"versionType": "git"
},
{
"status": "affected",
"version": "a6a5325239c20202e18e21e94291bccc659fbf9e",
"lessThan": "34bc747a61bef572244b01b095552b629cd8d2a2",
"versionType": "git"
},
{
"status": "affected",
"version": "a6a5325239c20202e18e21e94291bccc659fbf9e",
"lessThan": "1d8c85359b5075c7937925b673add7ed00e57ec8",
"versionType": "git"
},
{
"status": "affected",
"version": "a6a5325239c20202e18e21e94291bccc659fbf9e",
"lessThan": "a277422d194c62daa1b961f5f739689e53fe7301",
"versionType": "git"
},
{
"status": "affected",
"version": "a6a5325239c20202e18e21e94291bccc659fbf9e",
"lessThan": "4b7161804d8f31227551901f93947bb4eea4690b",
"versionType": "git"
},
{
"status": "affected",
"version": "a6a5325239c20202e18e21e94291bccc659fbf9e",
"lessThan": "3a7d9271b37c80fb7db04aff3bc5621cfdaf9bee",
"versionType": "git"
},
{
"status": "affected",
"version": "a6a5325239c20202e18e21e94291bccc659fbf9e",
"lessThan": "374bf9e4b90f979e052332c4faca2d745c491a12",
"versionType": "git"
}
],
"programFiles": [
"drivers/net/ethernet/atheros/atl1e/atl1e_main.c"
],
"defaultStatus": "unaffected"
},
{
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"vendor": "Linux",
"product": "Linux",
"versions": [
{
"status": "affected",
"version": "2.6.27"
},
{
"status": "unaffected",
"version": "0",
"lessThan": "2.6.27",
"versionType": "semver"
},
{
"status": "unaffected",
"version": "5.10.271",
"versionType": "semver",
"lessThanOrEqual": "5.10.*"
},
{
"status": "unaffected",
"version": "5.15.222",
"versionType": "semver",
"lessThanOrEqual": "5.15.*"
},
{
"status": "unaffected",
"version": "6.1.189",
"versionType": "semver",
"lessThanOrEqual": "6.1.*"
},
{
"status": "unaffected",
"version": "6.6.158",
"versionType": "semver",
"lessThanOrEqual": "6.6.*"
},
{
"status": "unaffected",
"version": "6.12.112",
"versionType": "semver",
"lessThanOrEqual": "6.12.*"
},
{
"status": "unaffected",
"version": "6.18.55",
"versionType": "semver",
"lessThanOrEqual": "6.18.*"
},
{
"status": "unaffected",
"version": "7.2.9",
"versionType": "semver",
"lessThanOrEqual": "7.2.*"
},
{
"status": "unaffected",
"version": "7.3",
"versionType": "original_commit_for_fix",
"lessThanOrEqual": "*"
}
],
"programFiles": [
"drivers/net/ethernet/atheros/atl1e/atl1e_main.c"
],
"defaultStatus": "affected"
}
]
}
],
"published": "2026-10-18T16:16:59.613",
"references": [
{
"url": "https://git.kernel.org/stable/c/1d8c85359b5075c7937925b673add7ed00e57ec8",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
},
{
"url": "https://git.kernel.org/stable/c/34bc747a61bef572244b01b095552b629cd8d2a2",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
},
{
"url": "https://git.kernel.org/stable/c/374bf9e4b90f979e052332c4faca2d745c491a12",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
},
{
"url": "https://git.kernel.org/stable/c/3a7d9271b37c80fb7db04aff3bc5621cfdaf9bee",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
},
{
"url": "https://git.kernel.org/stable/c/4b7161804d8f31227551901f93947bb4eea4690b",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
},
{
"url": "https://git.kernel.org/stable/c/4bbb44075bd3e773d61706882ab923ece8b3b519",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
},
{
"url": "https://git.kernel.org/stable/c/a277422d194c62daa1b961f5f739689e53fe7301",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
},
{
"url": "https://git.kernel.org/stable/c/ca862b1a4af7eac19429ca7ab92625f94ff4a46c",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
}
],
"vulnStatus": "Received",
"descriptions": [
{
"lang": "en",
"value": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: atl1e: fix soft lockup on out-of-range hw_next_to_clean read\n\nSame issue as atl1c (see the first commit in this series, \"net:\natl1c: fix soft lockup on out-of-range tpd_cons read\"): the hardware\ncan report an out-of-range hw_next_to_clean (seen as 0xffff) while\nthe PCIe link/MAC is resetting. An out-of-range value can never be\nreached and the loop below would spin forever. Treat it as \"nothing\nnew to clean\" instead."
}
],
"lastModified": "2026-10-19T10:19:00.483",
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
}