CVE-2026-98302
kernel: net: fddi: skfp: fix NULL deref when setting the MAC address while down
Severity
ModerateRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · October 6, 2026
Updated · October 11, 2026
Description
A flaw was found in the Linux kernel's SysKonnect FDDI (skfp) network driver. A local user with administrative privileges can trigger a null pointer dereference by configuring the Media Access Control (MAC) address on a network interface that is down. This issue occurs because the driver attempts to reset the adapter and clear transmission queues before the device has been initialized. Successful exploitation results in a kernel crash, leading to a Denial of Service (DoS).
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.1 · 5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CWE-476 · NULL Pointer Dereference