CVE-2026-98592

A flaw was found in the Linux kernel's SpacemiT Ethernet driver. During network packet transmission, a failure to map packet fragments causes the driver to release memory buffers without properly clearing the corresponding hardware descriptors. A local user able to trigger transmission mapping errors can cause the network controller's Direct Memory Access (DMA) engine to access unmapped memory, potentially resulting in memory corruption or a Denial of Service (DoS) through a system crash.

This vulnerability is rated Moderate for Red Hat environments because exploitation requires local access and the presence of specific SpacemiT network hardware, which is absent from typical enterprise deployments. Impact is largely confined to specialized embedded and automotive systems running platforms equipped with the SpacemiT network architecture. Although an authenticated local actor capable of inducing memory mapping failures during packet processing could cause the DMA controller to reference released memory, resulting in a system crash or kernel instability, the prerequisite conditions and specialized hardware substantially restrict the threat.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.