{"id":40961,"date":"2026-10-19T00:31:41","date_gmt":"2026-10-18T16:31:41","guid":{"rendered":"https:\/\/www.54iter.cn\/?vuln=cve-2026-98489"},"modified":"2026-10-19T00:31:41","modified_gmt":"2026-10-18T16:31:41","slug":"cve-2026-98489","status":"publish","type":"vuln","link":"https:\/\/www.54iter.cn\/?vuln=cve-2026-98489","title":{"rendered":"CVE-2026-98489 &#8211; In the Linux kernel, the following vulnerability has been resolved:\n\nnet: atl1c: fix soft"},"content":{"rendered":"<p>In the Linux kernel, the following vulnerability has been resolved:<\/p>\n<p>net: atl1c: fix soft lockup on out-of-range tpd_cons read<\/p>\n<p>The hardware can report an out-of-range tpd_cons (seen as 0xffff)<br \/>\nwhile the PCIe link\/MAC is resetting. An out-of-range value can<br \/>\nnever be reached and the loop below would spin forever. To avoid<br \/>\na soft lockup treat it as &#8220;nothing new to clean&#8221; instead.<\/p>\n<p>Reproduced on two machines, same NIC (Qualcomm Atheros AR8151 v2.0,<br \/>\n4-port), triggered by rebooting a Mikrotik CCR2004 PCIe card that<br \/>\nthe ports are directly linked to:<\/p>\n<p>&#8211; Ubuntu 26.04.1 LTS, kernel 7.0.0-31-generic. The link-flap<br \/>\n  precursor, before the lockup was captured with a full trace<br \/>\n  elsewhere:<\/p>\n<p>    atl1c 0000:05:00.0 enp5s0f0: NETDEV WATCHDOG: CPU: 4: transmit queue 2 timed out 489984 ms<br \/>\n    atl1c 0000:05:00.0: MAC state machine can&#8217;t be idle since disabled for 10ms second<br \/>\n    atl1c 0000:05:00.0: atl1c: enp5s0f0 NIC Link is Up<\/p>\n<p>  65535 (0xffff) here is the same value tpd_cons reads back once the<br \/>\n  loop below gets stuck.<\/p>\n<p>&#8211; Proxmox VE, kernel 7.0.14-11-pve. Same NIC\/trigger, this time<br \/>\n  caught by the soft lockup watchdog with a full stack trace:<\/p>\n<p>    watchdog: BUG: soft lockup &#8211; CPU#12 stuck for 354s! [napi\/eth%d-0:329]<br \/>\n    CPU: 12 UID: 0 PID: 329 Comm: napi\/eth%d-0 Tainted: P O L 7.0.14-11-pve #1 PREEMPT(lazy)<br \/>\n    RIP: 0010:atl1c_clean_tx+0x142\/0x2d0 [atl1c]<br \/>\n    Call Trace:<\/p>\n<p>     __napi_poll+0x32\/0x1e0<br \/>\n     napi_threaded_poll_loop+0x286\/0x2e0<br \/>\n     napi_threaded_poll+0xfd\/0x140<br \/>\n     kthread+0xf7\/0x130<br \/>\n     ret_from_fork+0x2da\/0x3a0<br \/>\n     ret_from_fork_asm+0x1a\/0x30<\/p>\n","protected":false},"excerpt":{"rendered":"<p>In the Linux kernel, the following vulnerability has been resolved:<\/p>\n<p>net: atl1c: fix soft lockup on out-of-range tpd_cons read<\/p>\n<p>The hardware can report an out-of-range tpd_cons (seen as 0xffff)<br \/>\nwhile <\/p>\n","protected":false},"template":"","meta":[],"categories":[],"tags":[],"class_list":["post-40961","vuln","type-vuln","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=\/wp\/v2\/vuln\/40961","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=\/wp\/v2\/vuln"}],"about":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=\/wp\/v2\/types\/vuln"}],"wp:attachment":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=40961"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.54iter.cn\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=40961"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.54iter.cn\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=40961"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}