{"id":"CVE-2026-97411","title":"In the Linux kernel, the following vulnerability has been resolved:\n\nnet: ibm: emac: mal: fix potential system hang in mal_remove()\n\nnapi_disable() is not idempotent and calling it on an already-disabled\nor unenabled NAPI context will ca…","summary":"In the Linux kernel, the following vulnerability has been resolved:\n\nnet: ibm: emac: mal: fix potential system hang in mal_remove()\n\nnapi_disable() is not idempotent and calling it on an already-disabled\nor unenabled NAPI context will ca…","severity":"none","vendor":"Linux","product":"Linux","affected":["Linux >= b3e441c6ed8655a42e7b4da1b6dc7939f259d9c9 < 9c1c814a662d9c81959eba591bb52b24639390f2","Linux >= b3e441c6ed8655a42e7b4da1b6dc7939f259d9c9 < 34c4cae51718d6f393415e01c61314c1bde02f2e","Linux >= b3e441c6ed8655a42e7b4da1b6dc7939f259d9c9 < 62126e73e230cf4bd6c27cf201949c4290af84a1","Linux >= b3e441c6ed8655a42e7b4da1b6dc7939f259d9c9 < f0399b3e212741bc5a64b8399d6266c4a150bdfe","Linux >= b3e441c6ed8655a42e7b4da1b6dc7939f259d9c9 < f6c1aad9b35fa083f48ce0c5926204891d82e089","Linux >= b3e441c6ed8655a42e7b4da1b6dc7939f259d9c9 < c4cb9a728df66c46067b26263f5beb633aae4087","Linux >= b3e441c6ed8655a42e7b4da1b6dc7939f259d9c9 < 7c5d41f87f079990bf241359e3c1332d8d10fe87","Linux 2.6.24"],"published":"2026-09-24","updated":"2026-10-03","sourceUpdated":"2026-10-03T11:17:53.200","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-97411","references":[{"url":"https://git.kernel.org/stable/c/34c4cae51718d6f393415e01c61314c1bde02f2e","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/62126e73e230cf4bd6c27cf201949c4290af84a1","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/7c5d41f87f079990bf241359e3c1332d8d10fe87","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/9c1c814a662d9c81959eba591bb52b24639390f2","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/c4cb9a728df66c46067b26263f5beb633aae4087","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/f0399b3e212741bc5a64b8399d6266c4a150bdfe","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/f6c1aad9b35fa083f48ce0c5926204891d82e089","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"}],"tags":["nvd","cve.org"],"epss":0.00173,"epssPercentile":0.06643,"ingestedAt":"2026-09-24T16:47:15.887Z","slug":"CVE-2026-97411","body":"## Overview\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nnet: ibm: emac: mal: fix potential system hang in mal_remove()\n\nnapi_disable() is not idempotent and calling it on an already-disabled\nor unenabled NAPI context will cause the kernel to spin indefinitely\nwaiting for the NAPI_STATE_SCHED bit to clear.\n\nIn mal_remove(), napi_disable() is called unconditionally. If no MACs were\nregistered, NAPI was never enabled. Also, if they were registered but\nsubsequently unregistered, NAPI was already disabled in\nmal_unregister_commac(). In either case, calling napi_disable() causes\nthe kernel to hang upon module removal.\n\nFix this by only calling napi_disable() in mal_remove() if the commac list\nis not empty (which implies NAPI is enabled).\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":3,"depthScoreParts":{"impact":2.8,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}