CVE-2026-98618

A flaw was found in the Linux kernel's fbnic network driver. When configuring the maximum number of standalone transmission and reception channels, the driver under-allocates vector resources, leaving uninitialized entries. This flaw allows a local user with administrative privileges to trigger a...

CVE-2026-98630

A flaw was found in the Linux kernel's fbnic network driver. When memory allocation for a payload page pool fails, the error cleanup routine incorrectly attempts to destroy an invalid error pointer instead of releasing the allocated header page pool. A local user able to trigger interface queue...

CVE-2026-98617

A flaw was found in the Linux kernel's Meta Host Network Interface fbnic driver. The driver incorrectly associates receive queues with network processing vectors and fails to verify whether the datapath is active before allocating queue memory. A privileged local user could trigger this flaw duri...

CVE-2026-98616

A flaw was found in the Linux kernel's fbnic driver. This flaw allows a local user to trigger a kernel crash, resulting in a Denial of Service DoS. During power management suspend or failed resume operations, the driver frees interrupt vectors without clearing the active vector counter. When the...

CVE-2026-98615

A flaw was found in the Linux kernel's fbnic network driver. A local user with administrative privileges could trigger a Denial of Service DoS by initiating a reset or teardown of the firmware mailbox. Because the driver fails to properly drain pending write requests from the hardware pipeline...

CVE-2026-98585

A flaw was found in the Linux kernel's fbnic network driver. A local user with administrative privileges could trigger a denial of service DoS and crash the system by configuring a network ring buffer size of zero. Because the driver fails to validate the input before executing a rounding...

Linux Distros Unpatched Vulnerability : CVE-2026-98630

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - eth: fbnic: Fix payload page pool error cleanup The payload page pool pointer contains an error pointer when its allocation fails. The cleanup path passes that...

Linux Distros Unpatched Vulnerability : CVE-2026-98617

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - eth: fbnic: use the Rx queue napi pointer to find the napi vector The queue management ndos pick the napi vector for an Rx queue with: nv = fbn-napiidx %...

Linux Distros Unpatched Vulnerability : CVE-2026-98585

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - eth: fbnic: Avoid rounding zero ring sizes rounduppowoftwo is undefined for zero. ethtool permits a zero ring size to reach the driver, where the minimum-size...

Linux Distros Unpatched Vulnerability : CVE-2026-98618

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - eth: fbnic: Handle maximum standalone channels Standalone channels use one NAPI vector for each Tx and Rx queue. fbnic's allocation path excludes FBNICMAXTXQS...

Linux Distros Unpatched Vulnerability : CVE-2026-98615

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - eth: fbnic: Set AWFLUSHMODE alongside AWFLUSH when flushing the mailbox When tearing down the FW mailbox Rx ring, fbnicmbxresetdescring writes AWCFG with FLUSH...

UBUNTU-CVE-2026-98619

In the Linux kernel, the following vulnerability has been resolved: net: ethtool: keep rtnllock for the ioctl self test An offline self test that brings the interface down and back up with netifclose / netifopen requires rtnllock for both. Since the ethtool IOCTL path became rtnl-optional for...

UBUNTU-CVE-2026-98617

In the Linux kernel, the following vulnerability has been resolved: eth: fbnic: use the Rx queue napi pointer to find the napi vector The queue management ndos pick the napi vector for an Rx queue with: nv = fbn-napiidx % fbn-numnapi; The issue is this is only correct in the cases where there are...

CVE-2026-98617

In the Linux kernel, the following vulnerability has been resolved: eth: fbnic: use the Rx queue napi pointer to find the napi vector The queue management ndos pick the napi vector for an Rx queue with: nv = fbn-napiidx % fbn-numnapi; The issue is this is only correct in the cases where there are...

CVE-2026-98585

In the Linux kernel, the following vulnerability has been resolved: eth: fbnic: Avoid rounding zero ring sizes rounduppowoftwo is undefined for zero. ethtool permits a zero ring size to reach the driver, where the minimum-size check should reject it. Leave zero unchanged while rounding nonzero ri...

UBUNTU-CVE-2026-98630

In the Linux kernel, the following vulnerability has been resolved: eth: fbnic: Fix payload page pool error cleanup The payload page pool pointer contains an error pointer when its allocation fails. The cleanup path passes that error pointer to pagepooldestroy instead of destroying the header pag...

UBUNTU-CVE-2026-98616

In the Linux kernel, the following vulnerability has been resolved: eth: fbnic: reset numnapi when the napi vectors are freed fbn-numnapi is the count of live napi vectors, each of which owns an IRQ. The PM path had freed them without clearing the count. fbnicpmsuspend tears the datapath down via...

UBUNTU-CVE-2026-98585

In the Linux kernel, the following vulnerability has been resolved: eth: fbnic: Avoid rounding zero ring sizes rounduppowoftwo is undefined for zero. ethtool permits a zero ring size to reach the driver, where the minimum-size check should reject it. Leave zero unchanged while rounding nonzero ri...

CVE-2026-98630

In the Linux kernel, the following vulnerability has been resolved: eth: fbnic: Fix payload page pool error cleanup The payload page pool pointer contains an error pointer when its allocation fails. The cleanup path passes that error pointer to pagepooldestroy instead of destroying the header pag...

CVE-2026-98616

In the Linux kernel, the following vulnerability has been resolved: eth: fbnic: reset numnapi when the napi vectors are freed fbn-numnapi is the count of live napi vectors, each of which owns an IRQ. The PM path had freed them without clearing the count. fbnicpmsuspend tears the datapath down via...