CVE-2026-98967
In the Linux kernel, the following vulnerability has been resolved: cxgb4/ch_ktls: disable softirqs around tid_list erases chcr_ktls_cpl_act_open_rpl() inserts into tid_list from the receive path using xa_insert_bh(). The array is shared by the adapter's connections and initialized with XA_FLAGS_LOCK_BH. However, chcr_ktls_dev_del() and the chcr_ktls_dev_add() error path use xa_erase(), which takes the XArray lock without disabling softirqs. When cleanup runs with softirqs enabled, a receive softirq for another connection on the same CPU can interrupt the erase and spin on the lock held by the interrupted task. Use xa_erase_bh() at both sites to match the insertion path.
Affected versions
Linux kernel versions
5.10.42,
5.12.9,
5.13
and later are affected. Fixed in
6.6.160,
6.12.113,
6.18.57,
7.2.11,
7.3
and their respective stable series.
References
5 totalFrequently asked questions
-
What is CVE-2026-98967?
CVE-2026-98967 is a unscored severity Linux kernel vulnerability . It affects Linux kernel versions from 5.10.42 onward and has been patched in 6.6.160, 6.12.113, 6.18.57 and others. CVE-2026-98967 has not been confirmed as actively exploited and is not listed in the CISA KEV catalog.
-
Is there a patch available for CVE-2026-98967?
Yes. CVE-2026-98967 has been patched. Fixed versions include 6.6.160, 6.12.113, 6.18.57 and others. If you are running Linux kernel 5.10.42 or later up to the fix versions, apply the relevant patch for your kernel branch.
-
Is CVE-2026-98967 actively exploited?
No. CVE-2026-98967 has not been confirmed as actively exploited. It is not listed in the CISA Known Exploited Vulnerabilities (KEV) catalog.