{
  "affected": [
    {
      "ranges": [
        {
          "events": [
            {
              "introduced": "b3e441c6ed8655a42e7b4da1b6dc7939f259d9c9"
            },
            {
              "fixed": "f6c1aad9b35fa083f48ce0c5926204891d82e089"
            },
            {
              "fixed": "c4cb9a728df66c46067b26263f5beb633aae4087"
            },
            {
              "fixed": "7c5d41f87f079990bf241359e3c1332d8d10fe87"
            }
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "type": "GIT"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "Linux",
        "name": "Kernel"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "2.6.24"
            },
            {
              "fixed": "6.12.111"
            }
          ],
          "type": "ECOSYSTEM"
        },
        {
          "events": [
            {
              "introduced": "6.13.0"
            },
            {
              "fixed": "6.18.53"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    }
  ],
  "database_specific": {
    "cna_assigner": "Linux",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97411.json"
  },
  "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: ibm: emac: mal: fix potential system hang in mal_remove()\n\nnapi_disable() is not idempotent and calling it on an already-disabled\nor unenabled NAPI context will cause the kernel to spin indefinitely\nwaiting for the NAPI_STATE_SCHED bit to clear.\n\nIn mal_remove(), napi_disable() is called unconditionally. If no MACs were\nregistered, NAPI was never enabled. Also, if they were registered but\nsubsequently unregistered, NAPI was already disabled in\nmal_unregister_commac(). In either case, calling napi_disable() causes\nthe kernel to hang upon module removal.\n\nFix this by only calling napi_disable() in mal_remove() if the commac list\nis not empty (which implies NAPI is enabled).",
  "id": "CVE-2026-97411",
  "modified": "2026-09-27T03:30:36.909823966Z",
  "published": "2026-09-24T16:03:17.967Z",
  "references": [
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/7c5d41f87f079990bf241359e3c1332d8d10fe87"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/c4cb9a728df66c46067b26263f5beb633aae4087"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/f6c1aad9b35fa083f48ce0c5926204891d82e089"
    },
    {
      "type": "ADVISORY",
      "url": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97411.json"
    },
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-97411"
    },
    {
      "type": "PACKAGE",
      "url": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git"
    }
  ],
  "schema_version": "1.9.0",
  "summary": "net: ibm: emac: mal: fix potential system hang in mal_remove()"
}