CVE-2026-98571
In the Linux kernel, the following vulnerability has been resolved: net: stmmac: clear stale buf->page after recycling on skb build failure In stmmac_rx(), when napi_build_skb() fails the descriptor page is recycled back to the page pool with page_pool_recycle_direct(), but buf->page is left pointing at the recycled page, unlike every other consumption site in the function which clears the pointer after handing the page away. With the stale pointer stmmac_rx_refill() skips the replacement allocation and programs the already-recycled page back into the RX descriptor. Clear buf->page on the napi_build_skb() failure path to keep the buffer lifecycle consistent with the other consumption sites.
Affected versions
Linux kernel versions
6.14
and later are affected. Fixed in
6.18.55,
7.2.9,
7.3
and their respective stable series.
References
3 totalFrequently asked questions
-
What is CVE-2026-98571?
CVE-2026-98571 is a unscored severity Linux kernel vulnerability . It affects Linux kernel versions from 6.14 onward and has been patched in 6.18.55, 7.2.9 and 7.3. CVE-2026-98571 has not been confirmed as actively exploited and is not listed in the CISA KEV catalog.
-
Is there a patch available for CVE-2026-98571?
Yes. CVE-2026-98571 has been patched. Fixed versions include 6.18.55, 7.2.9 and 7.3. If you are running Linux kernel 6.14 or later up to the fix versions, apply the relevant patch for your kernel branch.
-
Is CVE-2026-98571 actively exploited?
No. CVE-2026-98571 has not been confirmed as actively exploited. It is not listed in the CISA Known Exploited Vulnerabilities (KEV) catalog.