{
  "cveId": "CVE-2026-98798",
  "url": "https://patchblox.com/security/cve/CVE-2026-98798",
  "summary": "CVE-2026-98798 is fixed in 2 products on 1 platform, first by DEBIAN-CVE-2026-98798, released October 19, 2026. It is not reported as exploited. Patch Radar priority: Routine.",
  "title": "net: bcmgenet: fix NULL dereference in set_coalesce before first open",
  "description": "In the Linux kernel, the following vulnerability has been resolved:  net: bcmgenet: fix NULL dereference in set_coalesce before first open  The Rx ring priv and index are only set in bcmgenet_init_rx_ring(), which runs at open. Setting the Rx coalescing parameters on an interface that was never opened, e.g. \u0022ethtool -C eth0 rx-usecs 50\u0022, dereferences a NULL ring-\u003Epriv. The oops happens with RTNL held, so networking stays stuck until a reboot:    Unable to handle kernel paging request at virtual address 0000000000002788   pc : bcmgenet_set_rx_coalesce.isra.0\u002B0x10/0x88   lr : bcmgenet_set_coalesce\u002B0xe8/0x180   Call trace:    bcmgenet_set_rx_coalesce.isra.0\u002B0x10/0x88 (P)    __ethnl_set_coalesce.isra.0\u002B0x490/0x570    ethnl_set_coalesce\u002B0x48/0xc0    ethnl_default_set_doit\u002B0xf4/0x230    genl_family_rcv_msg_doit\u002B0xe8/0x160    genl_rcv_msg\u002B0x220/0x2a0    netlink_rcv_skb\u002B0x68/0x140    genl_rcv\u002B0x40/0x60    netlink_unicast\u002B0x338/0x3c0    netlink_sendmsg\u002B0x19c/0x3f8    __sock_sendmsg\u002B0x64/0xc0    __sys_sendto\u002B0x124/0x198    __arm64_sys_sendto\u002B0x30/0x48  Set priv and index at probe. Writing the registers while the interface is down is harmless because open resets the MAC and bcmgenet_init_rx_coalesce() reapplies the stored values.  It was observed on a Raspberry Pi CM4, but should apply to all other genet devices.",
  "published": "2026-10-18T16:17:33Z",
  "severity": "Moderate",
  "cvss": 4.4,
  "epss": 0.00173,
  "epssPercentile": 0.06769,
  "priority": "Routine",
  "priorityTier": 4,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "vendorAdvisory": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-98798",
  "fixes": [
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 13.5 (trixie)",
      "fixedVersion": "6.12.113-1",
      "fix": "DEBIAN-CVE-2026-98798",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2026-98798",
      "released": "2026-10-19T16:27:52Z"
    },
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 14",
      "fixedVersion": "7.2.10-1",
      "fix": "DEBIAN-CVE-2026-98798",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2026-98798",
      "released": "2026-10-19T16:27:52Z"
    },
    {
      "platform": "linux",
      "product": "linux-6.12",
      "release": "Debian 12.15 (bookworm)",
      "fixedVersion": "6.12.113-1~deb12u1",
      "fix": "DEBIAN-CVE-2026-98798",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2026-98798",
      "released": "2026-10-19T16:27:52Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-08T13:06:02Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}