{"id":"CVE-2026-98615","title":"kernel: eth: fbnic: Set AW_FLUSH_MODE alongside AW_FLUSH when flushing the mailbox (CVE-2026-98615)","summary":"A flaw was found in the Linux kernel's fbnic network driver. A local user with administrative privileges could trigger a Denial of Service (DoS) by initiating a reset or teardown of the firmware mailbox. Because the driver fails to properl…","severity":"medium","cvss":4.4,"cvssVector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","cvssSource":"vendor","cwe":"CWE-459","vendor":"Red Hat","product":"Linux","affected":["Linux >= fea860a2a6136658708fb530a82d59d29f708b74 < ed4163f6ba9b52bfd6216d5215ee7b8eb5072411","Linux >= 3b12f00ddd08e888273b2ac0488d396d90a836fc < 8a052cd4b2caee1f90cf0e3874377066939c90e7","Linux >= 3b12f00ddd08e888273b2ac0488d396d90a836fc < a969db6548a1b046cd1423701f5f9c3f5794e90d","Linux >= 3b12f00ddd08e888273b2ac0488d396d90a836fc < 8947f13e436a4ff5eed9f8f019b2865a07af4bb2","Linux 0a4aa8a32ddb96f320173a2e9b0e41f4a6d3746c","Linux >= 6.12.29 < 6.12.112","Linux >= 6.14.7 < 6.15","Linux 6.15"],"published":"2026-10-18","updated":"2026-10-21","sourceUpdated":"2026-10-21T09:23:31+00:00","source":"CSAF","sourceUrl":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-98615.json","references":[{"url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-98615.json"},{"url":"https://access.redhat.com/security/cve/CVE-2026-98615"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2554928"},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-98615"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-98615"},{"url":"https://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2026/CVE-2026-98615.mbox"},{"url":"https://git.kernel.org/stable/c/ed4163f6ba9b52bfd6216d5215ee7b8eb5072411"},{"url":"https://git.kernel.org/stable/c/8a052cd4b2caee1f90cf0e3874377066939c90e7"},{"url":"https://git.kernel.org/stable/c/a969db6548a1b046cd1423701f5f9c3f5794e90d"},{"url":"https://git.kernel.org/stable/c/8947f13e436a4ff5eed9f8f019b2865a07af4bb2"}],"tags":["csaf","vex","red-hat","cve.org"],"epss":0.00168,"epssPercentile":0.06015,"ingestedAt":"2026-10-18T15:45:12.239Z","slug":"CVE-2026-98615","body":"## Overview\n\nA flaw was found in the Linux kernel's fbnic network driver. A local user with administrative privileges could trigger a Denial of Service (DoS) by initiating a reset or teardown of the firmware mailbox. Because the driver fails to properly drain pending write requests from the hardware pipeline during mailbox ring resets, the firmware waits indefinitely for the flush to finish, leading to an unresponsive device.\n\n## Vendor advisories\n\n- **Red Hat VEX** · Moderate · updated 2026-10-21 · [vex](https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-98615.json)\n\n**kernel: eth: fbnic: Set AW_FLUSH_MODE alongside AW_FLUSH when flushing the mailbox** — rated Moderate by Red Hat. Released 2026-10-18, updated 2026-10-21.\n\nNot affected:\n\n- Red Hat Enterprise Linux 10\n- Red Hat Enterprise Linux 6\n- Red Hat Enterprise Linux 7\n- Red Hat Enterprise Linux 8\n- Red Hat Enterprise Linux 9\n- Red Hat OpenShift Container Platform 4\n\n## Remediation\n\nRefer to the advisory for fix availability.","depth":"sunlit","depthScore":24,"depthScoreParts":{"impact":24.2,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[{"seq":227017,"id":"CVE-2026-98615","ts":1792584998058,"field":"cvss","old":null,"new":"4.4"},{"seq":227016,"id":"CVE-2026-98615","ts":1792584998058,"field":"severity","old":"none","new":"medium"}]}