PatchSiren

PatchSiren cyber security CVE debrief

CVE-2026-98911 Linux CVE debrief

A vulnerability in the Linux kernel's dpaa2-switch component has been addressed. The issue arises from incorrect usage of the dpaa2_switch_free_fd() function in the error path of dpaa2_switch_rx(). This function is intended for Tx frame descriptors and expects a valid skb pointer, which is not present in the Rx path. To fix this, dma_unmap_page() has been extracted from dpaa2_switch_build_linear_skb() and directly integrated into dpaa2_switch_rx(). This allows for proper cleanup using free_pages() before an SKB is created and kfree_skb() afterwards.

Vendor
Linux
Product
Unknown
CVSS
HIGH 7.5
CISA KEV
Not listed in stored evidence
Original CVE published
2026-10-23
Original CVE updated
2026-10-26
Advisory published
2026-10-23
Advisory updated
2026-10-26

Who should care

Linux kernel maintainers, users, and administrators should assess exposure and prioritize verification of affected versions and apply patches or mitigations as available. This includes verifying patch application and system integrity, monitoring for potential exploitation attempts or related security incidents, and assessing exposure of affected Linux kernel versions.

Why it matters

A vulnerability in the Linux kernel's dpaa2-switch component has been addressed, and users should prioritize verification of affected versions and apply patches or mitigations as available.

  • Verify patch application and system integrity.
  • Monitor for potential exploitation attempts or related security incidents.
  • Assess exposure of affected Linux kernel versions.

Technical summary

The dpaa2-switch component in the Linux kernel has a vulnerability due to incorrect usage of the dpaa2_switch_free_fd() function in the error path of dpaa2_switch_rx(). This has been addressed by extracting dma_unmap_page() and directly integrating it into dpaa2_switch_rx(). The fix allows for proper cleanup using free_pages() before an SKB is created and kfree_skb() afterwards. Linux kernel maintainers and users should assess exposure and prioritize verification of affected versions, as well as apply patches or mitigations as available.

Defensive priority

Linux kernel maintainers and users should assess exposure and prioritize verification of affected versions, as well as apply patches or mitigations as available.

Recommended defensive actions

  • Review and apply patches or updates for the Linux kernel, specifically for the dpaa2-switch component.
  • Verify the integrity of affected systems and assess exposure.
  • Monitor for potential exploitation attempts or related security incidents.
  • Confirm whether affected product deployments exist in managed environments and assign an owner for follow-up.
  • Review compensating controls for exposed systems while remediation is scheduled and verified.
  • Check relevant monitoring, detection, and logs for exposed assets that need extra review.
  • Track exceptions, retest remediated assets, and close the item only after evidence is documented.

Evidence notes

The CVE Program record and NVD vulnerability detail provide official information on the vulnerability. Supplemental sources include various Linux kernel references. Linux kernel maintainers and users should verify affected versions, assess exposure, and apply patches or mitigations as available. The dpaa2-switch component's incorrect usage of dpaa2_switch_free_fd() in the error path of dpaa2_switch_rx() has been addressed by extracting dma_unmap_page() and directly integrating it into dpaa2_switch_rx(). This allows for proper cleanup

Sources and references

Verified primary and authoritative sources

  • CVE-2026-98911 CVE Program record

    Publisher, destination, and source semantics verified

    URL: https://www.cve.org/CVERecord?id=CVE-2026-98911

    CVE Program - Official CVE Program record with source-provided CVE metadata.

  • CVE-2026-98911 NVD vulnerability detail

    Publisher, destination, and source semantics verified

    URL: https://nvd.nist.gov/vuln/detail/CVE-2026-98911

    NIST National Vulnerability Database - Official NIST NVD detail page and source-specific vulnerability assessment.

Supplemental references

  • dpaa2-switch: fix the error path in dpaa2_switch_rx()

    Unverified legacy reference

    URL: https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/98xxx/CVE-2026-98911.json

    cve_program_cvelist_v5

  • Source reference

    Unverified legacy reference

    URL: https://git.kernel.org/stable/c/791068c962469af0090e1a1ee63657fb9eef40db

    Supplemental source

  • Source reference

    Unverified legacy reference

    URL: https://git.kernel.org/stable/c/ee54f8d7e642c44cfcc2dcb390b4c50e145d81b8

    Supplemental source

  • Source reference

    Unverified legacy reference

    URL: https://git.kernel.org/stable/c/259ad6093204b999d41e7e6d0ad90ef9a71a44ab

    Supplemental source

  • Source reference

    Unverified legacy reference

    URL: https://git.kernel.org/stable/c/f4ceb8e3d6d5becb4cda7a7098a8638e18c835a1

    Supplemental source

  • Source reference

    Unverified legacy reference

    URL: https://git.kernel.org/stable/c/fa232b4496cb59503ae5108c756cbe10e59b0bc3

    Supplemental source

  • Source reference

    Unverified legacy reference

    URL: https://git.kernel.org/stable/c/74c1c9f5c0c30bbd0c2cf87b6e3507e7ea46c13d

    Supplemental source

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.