Back to CVE records
High 7.0Published Oct 23, 2026

CVE-2026-98895net/mlx5: HWS, Handle destroying table that has a miss table

Updated under an hour ago ()

Does this affect you?

It affects Linux. Add what you run to find out whether that includes you.

EPSS puts the chance of exploitation in the next 30 days at 0.21%, higher than 10% of scored CVEs.

In the Linux kernel, the following vulnerability has been resolved: net/mlx5: HWS, Handle destroying table that has a miss table If a table has a miss table that was created by 'mlx5hws_table_set_default_miss' API function, its miss_tbl keeps the table that points to it in a list. If such table is deleted, we need to also remove it from the miss_tbl list, otherwise the node in miss_tbl list will contain garbage.

CVSS
7.0 HIGH (v3.1, CNA)CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness (CWE)
Not given
Known exploited
Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days)
0.21% (percentile 10)
Assigned by
Linux
NVD analysis
Received
Record last updated
Oct 26, 2026
First seen by InfoSec Signals
Oct 23, 2026

Affected products

Affected products
Linux Linux
linux:linux (from the name)
9fc43b5e3933a7e5924ba83d7561399d439de5bb builds before 6efdc212627cecf33b594256ae4460b4c52a126a; from 9fc43b5e3933a7e5924ba83d7561399d439de5bb before 60e9e82f162ab7399373ff2185119289e4f6dc06
CNA record

References

References

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.

Your cookie choices
We use essential cookies to run this site, and, only with your consent, an advertising cookie from Google to measure whether our ads lead to sign-ups and subscriptions. See our for details.