CVE-2026-97411
In the Linux kernel, the following vulnerability has been resolved: net: ibm: emac: mal: fix potential system hang in mal_remove() napi_disable() is not idempotent and calling it on an already-disabled or unenabled NAPI context will cause the kernel to spin indefinitely waiting for the NAPI_STATE_SCHED bit to clear. In mal_remove(), napi_disable() is called unconditionally. If no MACs were registered, NAPI was never enabled. Also, if they were registered but subsequently unregistered, NAPI was already disabled in mal_unregister_commac(). In either case, calling napi_disable() causes the kernel to hang upon module removal. Fix this by only calling napi_disable() in mal_remove() if the commac list is not empty (which implies NAPI is enabled).
Affected versions
Linux kernel versions
2.6.24
and later are affected. Fixed in
5.10.271,
5.15.222,
6.1.189,
6.6.158,
6.12.111,
6.18.53,
7.2
and their respective stable series.
References
7 totalFrequently asked questions
-
What is CVE-2026-97411?
CVE-2026-97411 is a unscored severity Linux kernel vulnerability . It affects Linux kernel versions from 2.6.24 onward and has been patched in 5.10.271, 5.15.222, 6.1.189 and others. CVE-2026-97411 has not been confirmed as actively exploited and is not listed in the CISA KEV catalog.
-
Is there a patch available for CVE-2026-97411?
Yes. CVE-2026-97411 has been patched. Fixed versions include 5.10.271, 5.15.222, 6.1.189 and others. If you are running Linux kernel 2.6.24 or later up to the fix versions, apply the relevant patch for your kernel branch.
-
Is CVE-2026-97411 actively exploited?
No. CVE-2026-97411 has not been confirmed as actively exploited. It is not listed in the CISA Known Exploited Vulnerabilities (KEV) catalog.