Linux Kernel Vulnerability in RX Resource Management

CVE-2026-98906

What is CVE-2026-98906?

A vulnerability in the Linux kernel affects the RX (receive) resource management when there is a reload failure. Specifically, in the lan966x driver, during the reallocation of RX resources for a new MTU (Maximum Transmission Unit), if the allocation fails, certain fields such as rx->page_order and rx->max_mtu are updated but not restored to their previous values. This inconsistency can lead to situations where the XDP (Express Data Path) layer advertises a frame size based on an unsuccessful new configuration, potentially resulting in packets being handled with incorrect resource settings that can disrupt network operations and performance. The fix involves ensuring that all related RX state information is correctly saved and restored to maintain operational integrity.

References