CVE-2026-98494

/// Technical description

In the Linux kernel, the following vulnerability has been resolved:

net: atl1: fix soft lockup on out-of-range cmb_tpd_next_to_clean read

Same issue as atl1c (see the first commit in this series, "net:

atl1c: fix soft lockup on out-of-range tpd_cons read"): the hardware

can report an out-of-range cmb_tpd_next_to_clean (seen as 0xffff)

while the PCIe link/MAC is resetting. An out-of-range value can

never be reached and the loop below would spin forever. Treat it as

"nothing new to clean" instead.

/// Remediation

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

/// References