{
  "schema_version": "1.6.1",
  "id": "RPI-CVE-2026-97411",
  "modified": "2026-10-07T17:22:01Z",
  "upstream": [
    "CVE-2026-97411"
  ],
  "published": "2026-09-24T16:08:25Z",
  "summary": "net: ibm: emac: mal: fix potential system hang in mal_remove()",
  "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: ibm: emac: mal: fix potential system hang in mal_remove()\n\nnapi_disable() is not idempotent and calling it on an already-disabled\nor unenabled NAPI context will cause the kernel to spin indefinitely\nwaiting for the NAPI_STATE_SCHED bit to clear.\n\nIn mal_remove(), napi_disable() is called unconditionally. If no MACs were\nregistered, NAPI was never enabled. Also, if they were registered but\nsubsequently unregistered, NAPI was already disabled in\nmal_unregister_commac(). In either case, calling napi_disable() causes\nthe kernel to hang upon module removal.\n\nFix this by only calling napi_disable() in mal_remove() if the commac list\nis not empty (which implies NAPI is enabled).",
  "affected": [
    {
      "package": {
        "ecosystem": "Raspberry Pi OS:12",
        "name": "linux"
      },
      "versions": [
        "1:6.1.47-1+rpt4"
      ],
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "linux-image-6.1.0-rpi3-rpi-2712",
            "binary_version": "1:6.1.47-1+rpt4"
          },
          {
            "binary_name": "linux-image-6.1.0-rpi3-rpi-v6",
            "binary_version": "1:6.1.47-1+rpt4"
          },
          {
            "binary_name": "linux-image-6.1.0-rpi3-rpi-v7",
            "binary_version": "1:6.1.47-1+rpt4"
          },
          {
            "binary_name": "linux-image-6.1.0-rpi3-rpi-v7l",
            "binary_version": "1:6.1.47-1+rpt4"
          },
          {
            "binary_name": "linux-image-6.1.0-rpi3-rpi-v8",
            "binary_version": "1:6.1.47-1+rpt4"
          }
        ]
      },
      "database_specific": {
        "per_version": {
          "1:6.1.47-1+rpt4": {
            "linux_commit": "655fc658a15ae7a6f37103754adb39ba52a9a14e",
            "upstream_version": "6.1.47",
            "assessment": "commit ancestry (strak rule)",
            "upstream_fixed": "6.1.189",
            "compiled_filter": false
          }
        }
      }
    }
  ],
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-97411"
    },
    {
      "type": "FIX",
      "url": "https://git.kernel.org/stable/c/9c1c814a662d9c81959eba591bb52b24639390f2"
    },
    {
      "type": "FIX",
      "url": "https://git.kernel.org/stable/c/34c4cae51718d6f393415e01c61314c1bde02f2e"
    },
    {
      "type": "FIX",
      "url": "https://git.kernel.org/stable/c/62126e73e230cf4bd6c27cf201949c4290af84a1"
    },
    {
      "type": "FIX",
      "url": "https://git.kernel.org/stable/c/f0399b3e212741bc5a64b8399d6266c4a150bdfe"
    },
    {
      "type": "FIX",
      "url": "https://git.kernel.org/stable/c/f6c1aad9b35fa083f48ce0c5926204891d82e089"
    },
    {
      "type": "FIX",
      "url": "https://git.kernel.org/stable/c/c4cb9a728df66c46067b26263f5beb633aae4087"
    },
    {
      "type": "FIX",
      "url": "https://git.kernel.org/stable/c/7c5d41f87f079990bf241359e3c1332d8d10fe87"
    }
  ],
  "database_specific": {
    "source": "https://git.kernel.org/pub/scm/linux/security/vulns.git",
    "upstream_modified": "2026-10-03T11:04:09Z"
  }
}