CVE-2026-98911 dpaa2-switch: fix the error path in dpaa2_switch_rx()
- Exploited in the wild
- Not known
- Fix
- Available
What is CVE-2026-98911?
CVE-2026-98911 is a high-severity vulnerability in Linux, published on 23 Oct 2026.
Official description
In the Linux kernel, the following vulnerability has been resolved:
dpaa2-switch: fix the error path in dpaa2_switch_rx()
In case of an error in dpaa2_switch_rx(), the dpaa2_switch_free_fd() function is called in order to free the FD. This is incorrect since the dpaa2_switch_free_fd() is intended to be used on Tx frame descriptors, meaning that it expects in the software annotation area of the FD data to find a valid skb pointer on which to call dev_kfree_skb().
Fix this by extracting the dma_unmap_page() from dpaa2_switch_build_linear_skb() directly into the dpaa2_switch_rx() function. This allows us to directly use free_pages() in case of an error before an SKB was created and kfree_skb() afterwards.
Which versions are affected by CVE-2026-98911?
How do I fix CVE-2026-98911?
Upgrade to a fixed version.
Is CVE-2026-98911 being exploited?
There is no known exploitation of CVE-2026-98911 in the wild and no public exploit code.
Sources
Also known as AZL-110677, BELL-CVE-2026-98911, DEBIAN-CVE-2026-98911, GHSA-2gxg-jvpv-v5rf, UBUNTU-CVE-2026-98911.