CVE-2026-97411

net: ibm: emac: mal: fix potential system hang in mal_remove()

N/A

Published: September 24, 2026 at 04:03 PM UTC

Updated: October 3, 2026 at 11:17 AM UTC

1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

N/A

Exploit prediction

EPSS 0.2%

Description

In the Linux kernel, the following vulnerability has been resolved: net: ibm: emac: mal: fix potential system hang in mal_remove() napi_disable() is not idempotent and calling it on an already-disabled or unenabled NAPI context will cause the kernel to spin indefinitely waiting for the NAPI_STATE_SCHED bit to clear. In mal_remove(), napi_disable() is called unconditionally. If no MACs were registered, NAPI was never enabled. Also, if they were registered but subsequently unregistered, NAPI was already disabled in mal_unregister_commac(). In either case, calling napi_disable() causes the kernel to hang upon module removal. Fix this by only calling napi_disable() in mal_remove() if the commac list is not empty (which implies NAPI is enabled).

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Linux Kernel · Linux

95%

2.6.24 ≤ v < 5.10.2712.6.24 ≤ v < 5.15.2222.6.24 ≤ v < 6.1.1892.6.24 ≤ v < 6.12.1112.6.24 ≤ v < 6.18.532.6.24 ≤ v < 6.6.1582.6.24 ≤ v < 7.22.6.24b3e441c6ed8655a42e7b4da1b6dc7939f259d9c9

Vendor states this is fixed in 34c4cae51718d6f393415e01c61314c1bde02f2e (fixed)

Vendor states this is fixed in 62126e73e230cf4bd6c27cf201949c4290af84a1 (fixed)

Vendor states this is fixed in 7c5d41f87f079990bf241359e3c1332d8d10fe87 (fixed)

Vendor states this is fixed in 9c1c814a662d9c81959eba591bb52b24639390f2 (fixed)

Vendor states this is fixed in c4cb9a728df66c46067b26263f5beb633aae4087 (fixed)

Vendor states this is fixed in f0399b3e212741bc5a64b8399d6266c4a150bdfe (fixed)

Vendor states this is fixed in f6c1aad9b35fa083f48ce0c5926204891d82e089 (fixed)

Vendor states this is fixed in 2.6.24 (unaffected)

Vendor states this is fixed in 5.10.271 (unaffected)

Vendor states this is fixed in 5.15.222 (unaffected)

Vendor states this is fixed in 6.1.189 (unaffected)

Vendor states this is fixed in 6.12.111 (unaffected)