Answer in brief
CVE-2026-98486 records a Unknown severity vulnerability in net: ena: fix MMIO read buffer leak on probe failure. The current sources do not mark it as known exploited. The current feed maps Linux/Linux (generic), Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
Analysis pending evidence review
HOL Guard separates source facts from reviewed analysis. See the methodology.
A CVSS score is not reported in the current record. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.
Analysis status
Analysis pending evidence review
Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.
The current feed maps Linux/Linux (generic), Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
| Package | Affected range | Fixed version |
|---|---|---|
| Linux/Linuxgeneric | >=1738cd3ed342294360d6a74d4e58800004bff854 <7bd3e9a2d0c288e54f51df260d9433163f5fbc1e || >=1738cd3ed342294360d6a74d4e58800004bff854 <30ff01b4c7e419bb70f40f01dcd7f6af680808b3 || >=1738cd3ed342294360d6a74d4e58800004bff854 <47785f9f638b064ce6e32e8e3b6f1ffd83849fc2 || >=1738cd3ed342294360d6a74d4e58800004bff854 <9476b4468862927297c94c440863cd8ed1e7cc83 | 7bd3e9a2d0c288e54f51df260d9433163f5fbc1e, 30ff01b4c7e419bb70f40f01dcd7f6af680808b3, 47785f9f638b064ce6e32e8e3b6f1ffd83849fc2, 9476b4468862927297c94c440863cd8ed1e7cc83 |
| Linux/Linuxgeneric | 4.9 | Not reported |
| Linux/Linuxgeneric | >=1738cd3ed342294360d6a74d4e58800004bff854 <a0f5fd7a285f44fa402242f26feddfe1d4a0fc6c || >=1738cd3ed342294360d6a74d4e58800004bff854 <7bd3e9a2d0c288e54f51df260d9433163f5fbc1e || >=1738cd3ed342294360d6a74d4e58800004bff854 <30ff01b4c7e419bb70f40f01dcd7f6af680808b3 || >=1738cd3ed342294360d6a74d4e58800004bff854 <47785f9f638b064ce6e32e8e3b6f1ffd83849fc2 || >=1738cd3ed342294360d6a74d4e58800004bff854 <9476b4468862927297c94c440863cd8ed1e7cc83 | a0f5fd7a285f44fa402242f26feddfe1d4a0fc6c, 7bd3e9a2d0c288e54f51df260d9433163f5fbc1e, 30ff01b4c7e419bb70f40f01dcd7f6af680808b3, 47785f9f638b064ce6e32e8e3b6f1ffd83849fc2, 9476b4468862927297c94c440863cd8ed1e7cc83 |
Published upstream
Oct 18, 2026
Evidence: source:cvelist:source_dates:source-dates:recordSource modified
Oct 21, 2026
Evidence: source:cvelist:source_dates:source-dates:recordFirst seen by HOL
Oct 18, 2026
In the Linux kernel, the following vulnerability has been resolved: net: ena: fix MMIO read buffer leak on probe failure ena_device_init() initializes the MMIO read mechanism with ena_com_mmio_reg_read_request_init(), which allocates a coherent DMA buffer for MMIO read responses. The normal removal path releases this buffer through ena_com_mmio_reg_read_request_destroy(). However, if ena_probe() fails after ena_device_init() succeeds, the error path destroys the admin resources and eventually frees ena_dev without destroying the MMIO read request, leaving the coherent DMA buffer allocated. Call ena_com_mmio_reg_read_request_destroy() in the probe error path before releasing the remaining device resources. This issue was found by manual code inspection.
Quoted source text, attributed separately from HOL analysis.