Vulnerability feed

Executive summary

This advisory describes a fix to the Linux kernel's dpaa2-switch network driver, which handled frames incorrectly on an error path. The advisory does not state how serious the flaw is, and it does not give a severity rating for CVE-2026-98911. The fix is a Linux kernel stable tree patch, and the advisory does not describe any specific recommended action beyond applying the patched kernel code.

Technical summary

The flaw is in the error handling of dpaa2_switch_rx(), where dpaa2_switch_free_fd() was called on a receive frame descriptor even though that function is meant for transmit descriptors and expects a valid skb pointer in the software annotation area. The fix moves the dma_unmap_page() call into dpaa2_switch_rx() and frees the buffer with free_pages() before an skb is created, or with kfree_skb() afterwards. The advisory does not state the vulnerability class, attack vector, or preconditions for exploitation. It does not state affected or fixed kernel versions, workarounds, exploitation status, or detection guidance. The commit references the upstream commit 74c1c9f5c0c30bbd0c2cf87b6e3507e7ea46c13d.

Summaries are generated by AI from the linked advisory text. Confirm versions and fixes at the source.

Summarized from git.kernel.org/stable/c/259ad6093204b99…7e6d0ad90ef9a71a44ab

Impact if exploited

How it is exploited

Attack vector

Adjacent network

Attack complexity

High

Privileges required

None

User interaction

None

Scope

Unchanged

CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Affects

LinuxNXPLinuxLinux kernelNXP dpaa2-switch