CVE-2026-98594 (GCVE-0-2026-98594)
Vulnerability from cvelistv5
Published
2026-10-18 15:19
Modified
2026-10-19 09:22
Severity ?
Summary
In the Linux kernel, the following vulnerability has been resolved: tg3: clean up PHYLIB resources on probe failure tg3_get_invariants() can register an MDIO bus and connect a PHY for USE_PHYLIB devices. If tg3_init_one() later fails, its common error path releases the mappings and netdev without undoing those PHYLIB resources. Disconnect the PHY and unregister the MDIO bus before the remaining teardown. Guard PHY cleanup with USE_PHYLIB to match tg3_phy_init(), and call tg3_mdio_fini() unconditionally to match tg3_mdio_init(). The existing IS_CONNECTED and MDIOBUS_INITED flags make both helpers safe when initialization only completed partially. This issue was identified during our ongoing static-analysis research while reviewing kernel code.
References
Impacted products
Vendor Product Version
Linux Linux Version: 158d7abdae85e9ac43d99780c372d79c119f7626
Version: 158d7abdae85e9ac43d99780c372d79c119f7626
Version: 158d7abdae85e9ac43d99780c372d79c119f7626
Version: 158d7abdae85e9ac43d99780c372d79c119f7626
Version: 158d7abdae85e9ac43d99780c372d79c119f7626
Version: 158d7abdae85e9ac43d99780c372d79c119f7626
Version: 158d7abdae85e9ac43d99780c372d79c119f7626
Version: 158d7abdae85e9ac43d99780c372d79c119f7626
 Create a notification for this product.
Show details on NVD website

To clipboard 

{
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "drivers/net/ethernet/broadcom/tg3.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "ce86d6929d03e6b0abcb781dfa50f9f0816bff78",
              "status": "affected",
              "version": "158d7abdae85e9ac43d99780c372d79c119f7626",
              "versionType": "git"
            },
            {
              "lessThan": "a449eedb3b1eb5b8b1f5ed116a1bfe85eaaf81df",
              "status": "affected",
              "version": "158d7abdae85e9ac43d99780c372d79c119f7626",
              "versionType": "git"
            },
            {
              "lessThan": "0844402326d4e48a28688f93ec6442e93bb442fa",
              "status": "affected",
              "version": "158d7abdae85e9ac43d99780c372d79c119f7626",
              "versionType": "git"
            },
            {
              "lessThan": "e766321288b507afb70d2bfef6ba443213329f79",
              "status": "affected",
              "version": "158d7abdae85e9ac43d99780c372d79c119f7626",
              "versionType": "git"
            },
            {
              "lessThan": "d2abb0013b933d59ee441185df0eca9e8c0b33eb",
              "status": "affected",
              "version": "158d7abdae85e9ac43d99780c372d79c119f7626",
              "versionType": "git"
            },
            {
              "lessThan": "6515c41503eef849abd2c7364f34e4bb25110f90",
              "status": "affected",
              "version": "158d7abdae85e9ac43d99780c372d79c119f7626",
              "versionType": "git"
            },
            {
              "lessThan": "b6c0c757c65893ad7bb17e8bcf33cdd8257d7b3d",
              "status": "affected",
              "version": "158d7abdae85e9ac43d99780c372d79c119f7626",
              "versionType": "git"
            },
            {
              "lessThan": "a92e1a412c53dc0d9ad639e7abf8b3fc70a5b6ad",
              "status": "affected",
              "version": "158d7abdae85e9ac43d99780c372d79c119f7626",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "drivers/net/ethernet/broadcom/tg3.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "2.6.27"
            },
            {
              "lessThan": "2.6.27",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.10.*",
              "status": "unaffected",
              "version": "5.10.271",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.15.*",
              "status": "unaffected",
              "version": "5.15.222",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.1.*",
              "status": "unaffected",
              "version": "6.1.189",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.6.*",
              "status": "unaffected",
              "version": "6.6.158",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.12.*",
              "status": "unaffected",
              "version": "6.12.112",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.18.*",
              "status": "unaffected",
              "version": "6.18.55",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.2.*",
              "status": "unaffected",
              "version": "7.2.9",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "7.3",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.10.271",
                  "versionStartIncluding": "2.6.27",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.15.222",
                  "versionStartIncluding": "2.6.27",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.1.189",
                  "versionStartIncluding": "2.6.27",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.6.158",
                  "versionStartIncluding": "2.6.27",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.12.112",
                  "versionStartIncluding": "2.6.27",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.18.55",
                  "versionStartIncluding": "2.6.27",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "7.2.9",
                  "versionStartIncluding": "2.6.27",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "7.3",
                  "versionStartIncluding": "2.6.27",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ntg3: clean up PHYLIB resources on probe failure\n\ntg3_get_invariants() can register an MDIO bus and connect a PHY for\nUSE_PHYLIB devices. If tg3_init_one() later fails, its common error path\nreleases the mappings and netdev without undoing those PHYLIB resources.\n\nDisconnect the PHY and unregister the MDIO bus before the remaining\nteardown. Guard PHY cleanup with USE_PHYLIB to match tg3_phy_init(), and\ncall tg3_mdio_fini() unconditionally to match tg3_mdio_init(). The existing\nIS_CONNECTED and MDIOBUS_INITED flags make both helpers safe when\ninitialization only completed partially.\n\nThis issue was identified during our ongoing static-analysis research while\nreviewing kernel code."
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-19T09:22:19.792Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/ce86d6929d03e6b0abcb781dfa50f9f0816bff78"
        },
        {
          "url": "https://git.kernel.org/stable/c/a449eedb3b1eb5b8b1f5ed116a1bfe85eaaf81df"
        },
        {
          "url": "https://git.kernel.org/stable/c/0844402326d4e48a28688f93ec6442e93bb442fa"
        },
        {
          "url": "https://git.kernel.org/stable/c/e766321288b507afb70d2bfef6ba443213329f79"
        },
        {
          "url": "https://git.kernel.org/stable/c/d2abb0013b933d59ee441185df0eca9e8c0b33eb"
        },
        {
          "url": "https://git.kernel.org/stable/c/6515c41503eef849abd2c7364f34e4bb25110f90"
        },
        {
          "url": "https://git.kernel.org/stable/c/b6c0c757c65893ad7bb17e8bcf33cdd8257d7b3d"
        },
        {
          "url": "https://git.kernel.org/stable/c/a92e1a412c53dc0d9ad639e7abf8b3fc70a5b6ad"
        }
      ],
      "title": "tg3: clean up PHYLIB resources on probe failure",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2026-98594",
    "datePublished": "2026-10-18T15:19:06.696Z",
    "dateReserved": "2026-09-25T10:25:14.359Z",
    "dateUpdated": "2026-10-19T09:22:19.792Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
  • Confirmed: The vulnerability is confirmed from an analyst perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
  • Patched: This vulnerability was successfully patched by the user reporting the sighting.
  • Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
  • Not confirmed: The user expresses doubt about the veracity of the vulnerability.
  • Not patched: This vulnerability was not successfully patched by the user reporting the sighting.