CVE-2026-98594
Estado: RecibidaSin puntuar—
Gravedad—Sin puntuar
Probabilidad de explotación0.21 %mayor que el 11 % de las CVE
Explotación activaNono figura en el catálogo de CISA
Exploit públicoNo conocidosin código público localizado
En el kernel de Linux se ha resuelto la siguiente vulnerabilidad:
tg3: limpiar los recursos de PHYLIB en caso de fallo durante la sonda
tg3_get_invariants() puede registrar un bus MDIO y conectar un PHY en los dispositivos con USE_PHYLIB. Si tg3_init_one() falla más adelante, su ruta de error común libera las asignaciones y el netdev sin deshacer esos recursos de PHYLIB.
Desconectar el PHY y anular el registro del bus MDIO antes del resto de la desactivación. Proteger la limpieza del PHY con USE_PHYLIB para que coincida con tg3_phy_init(), y llamar a tg3_mdio_fini() incondicionalmente para que coincida con tg3_mdio_init(). Las marcas existentes IS_CONNECTED y MDIOBUS_INITED hacen que ambas funciones sean seguras cuando la inicialización se ha completado solo parcialmente.
Leer descripción completaMostrar menos
Este problema se identificó durante nuestra investigación en curso de análisis estático al revisar código del kernel.
Traducción automática del texto original de NVD (en inglés).
CVSS
NVD no ha asignado puntuación CVSS a esta CVE (habitual desde el cambio de política de abril de 2026).
Probabilidad de explotación (EPSS)
- Probabilidad de explotación en los próximos 30 días
- 0.21 %
- Percentil entre todas las CVEs puntuadas
- 11
- Fecha de la puntuación
- 20/10/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
Tecnologías afectadas (1)
⚠ Inferidas por IA a partir de la descripción — NVD aún no ha analizado esta CVE; no son CPE verificados.
Referencias
Mostrar las 8 referencias
- https://git.kernel.org/stable/c/0844402326d4e48a28688f93ec6442e93bb442fa
- https://git.kernel.org/stable/c/6515c41503eef849abd2c7364f34e4bb25110f90
- https://git.kernel.org/stable/c/a449eedb3b1eb5b8b1f5ed116a1bfe85eaaf81df
- https://git.kernel.org/stable/c/a92e1a412c53dc0d9ad639e7abf8b3fc70a5b6ad
- https://git.kernel.org/stable/c/b6c0c757c65893ad7bb17e8bcf33cdd8257d7b3d
- https://git.kernel.org/stable/c/ce86d6929d03e6b0abcb781dfa50f9f0816bff78
- https://git.kernel.org/stable/c/d2abb0013b933d59ee441185df0eca9e8c0b33eb
- https://git.kernel.org/stable/c/e766321288b507afb70d2bfef6ba443213329f79
JSON original (NVD)
Mostrar
{
"id": "CVE-2026-98594",
"cveTags": [],
"metrics": {},
"affected": [
{
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"affectedData": [
{
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"vendor": "Linux",
"product": "Linux",
"versions": [
{
"status": "affected",
"version": "158d7abdae85e9ac43d99780c372d79c119f7626",
"lessThan": "ce86d6929d03e6b0abcb781dfa50f9f0816bff78",
"versionType": "git"
},
{
"status": "affected",
"version": "158d7abdae85e9ac43d99780c372d79c119f7626",
"lessThan": "a449eedb3b1eb5b8b1f5ed116a1bfe85eaaf81df",
"versionType": "git"
},
{
"status": "affected",
"version": "158d7abdae85e9ac43d99780c372d79c119f7626",
"lessThan": "0844402326d4e48a28688f93ec6442e93bb442fa",
"versionType": "git"
},
{
"status": "affected",
"version": "158d7abdae85e9ac43d99780c372d79c119f7626",
"lessThan": "e766321288b507afb70d2bfef6ba443213329f79",
"versionType": "git"
},
{
"status": "affected",
"version": "158d7abdae85e9ac43d99780c372d79c119f7626",
"lessThan": "d2abb0013b933d59ee441185df0eca9e8c0b33eb",
"versionType": "git"
},
{
"status": "affected",
"version": "158d7abdae85e9ac43d99780c372d79c119f7626",
"lessThan": "6515c41503eef849abd2c7364f34e4bb25110f90",
"versionType": "git"
},
{
"status": "affected",
"version": "158d7abdae85e9ac43d99780c372d79c119f7626",
"lessThan": "b6c0c757c65893ad7bb17e8bcf33cdd8257d7b3d",
"versionType": "git"
},
{
"status": "affected",
"version": "158d7abdae85e9ac43d99780c372d79c119f7626",
"lessThan": "a92e1a412c53dc0d9ad639e7abf8b3fc70a5b6ad",
"versionType": "git"
}
],
"programFiles": [
"drivers/net/ethernet/broadcom/tg3.c"
],
"defaultStatus": "unaffected"
},
{
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"vendor": "Linux",
"product": "Linux",
"versions": [
{
"status": "affected",
"version": "2.6.27"
},
{
"status": "unaffected",
"version": "0",
"lessThan": "2.6.27",
"versionType": "semver"
},
{
"status": "unaffected",
"version": "5.10.271",
"versionType": "semver",
"lessThanOrEqual": "5.10.*"
},
{
"status": "unaffected",
"version": "5.15.222",
"versionType": "semver",
"lessThanOrEqual": "5.15.*"
},
{
"status": "unaffected",
"version": "6.1.189",
"versionType": "semver",
"lessThanOrEqual": "6.1.*"
},
{
"status": "unaffected",
"version": "6.6.158",
"versionType": "semver",
"lessThanOrEqual": "6.6.*"
},
{
"status": "unaffected",
"version": "6.12.112",
"versionType": "semver",
"lessThanOrEqual": "6.12.*"
},
{
"status": "unaffected",
"version": "6.18.55",
"versionType": "semver",
"lessThanOrEqual": "6.18.*"
},
{
"status": "unaffected",
"version": "7.2.9",
"versionType": "semver",
"lessThanOrEqual": "7.2.*"
},
{
"status": "unaffected",
"version": "7.3",
"versionType": "original_commit_for_fix",
"lessThanOrEqual": "*"
}
],
"programFiles": [
"drivers/net/ethernet/broadcom/tg3.c"
],
"defaultStatus": "affected"
}
]
}
],
"published": "2026-10-18T16:17:12.043",
"references": [
{
"url": "https://git.kernel.org/stable/c/0844402326d4e48a28688f93ec6442e93bb442fa",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
},
{
"url": "https://git.kernel.org/stable/c/6515c41503eef849abd2c7364f34e4bb25110f90",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
},
{
"url": "https://git.kernel.org/stable/c/a449eedb3b1eb5b8b1f5ed116a1bfe85eaaf81df",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
},
{
"url": "https://git.kernel.org/stable/c/a92e1a412c53dc0d9ad639e7abf8b3fc70a5b6ad",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
},
{
"url": "https://git.kernel.org/stable/c/b6c0c757c65893ad7bb17e8bcf33cdd8257d7b3d",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
},
{
"url": "https://git.kernel.org/stable/c/ce86d6929d03e6b0abcb781dfa50f9f0816bff78",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
},
{
"url": "https://git.kernel.org/stable/c/d2abb0013b933d59ee441185df0eca9e8c0b33eb",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
},
{
"url": "https://git.kernel.org/stable/c/e766321288b507afb70d2bfef6ba443213329f79",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
}
],
"vulnStatus": "Received",
"descriptions": [
{
"lang": "en",
"value": "In the Linux kernel, the following vulnerability has been resolved:\n\ntg3: clean up PHYLIB resources on probe failure\n\ntg3_get_invariants() can register an MDIO bus and connect a PHY for\nUSE_PHYLIB devices. If tg3_init_one() later fails, its common error path\nreleases the mappings and netdev without undoing those PHYLIB resources.\n\nDisconnect the PHY and unregister the MDIO bus before the remaining\nteardown. Guard PHY cleanup with USE_PHYLIB to match tg3_phy_init(), and\ncall tg3_mdio_fini() unconditionally to match tg3_mdio_init(). The existing\nIS_CONNECTED and MDIOBUS_INITED flags make both helpers safe when\ninitialization only completed partially.\n\nThis issue was identified during our ongoing static-analysis research while\nreviewing kernel code."
}
],
"lastModified": "2026-10-19T10:19:20.620",
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
}