CVE-2026-98619
kernel: net: ethtool: keep rtnl_lock for the ioctl self test
Severity
ModerateRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · October 18, 2026
Updated · October 21, 2026
Description
A flaw was found in the Linux kernel's ethtool subsystem. A local user with network administration privileges can cause a Denial of Service (DoS) by initiating an offline self-test on affected network drivers. Because the test routine fails to hold the necessary synchronization locks when taking the network interface offline and bringing it back online, concurrent operations can trigger race conditions, assertion failures, or kernel crashes.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.1 · 4.4CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
CWE-413 · Improper Resource Locking