{
  "affected": [
    {
      "ranges": [
        {
          "events": [
            {
              "introduced": "1738cd3ed342294360d6a74d4e58800004bff854"
            },
            {
              "fixed": "7bd3e9a2d0c288e54f51df260d9433163f5fbc1e"
            },
            {
              "fixed": "30ff01b4c7e419bb70f40f01dcd7f6af680808b3"
            },
            {
              "fixed": "47785f9f638b064ce6e32e8e3b6f1ffd83849fc2"
            },
            {
              "fixed": "9476b4468862927297c94c440863cd8ed1e7cc83"
            }
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "type": "GIT"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "Linux",
        "name": "Kernel"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "4.9.0"
            },
            {
              "fixed": "6.12.112"
            }
          ],
          "type": "ECOSYSTEM"
        },
        {
          "events": [
            {
              "introduced": "6.13.0"
            },
            {
              "fixed": "6.18.55"
            }
          ],
          "type": "ECOSYSTEM"
        },
        {
          "events": [
            {
              "introduced": "6.19.0"
            },
            {
              "fixed": "7.2.9"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    }
  ],
  "database_specific": {
    "cna_assigner": "Linux",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/98xxx/CVE-2026-98486.json"
  },
  "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: ena: fix MMIO read buffer leak on probe failure\n\nena_device_init() initializes the MMIO read mechanism with\nena_com_mmio_reg_read_request_init(), which allocates a coherent DMA\nbuffer for MMIO read responses.\n\nThe normal removal path releases this buffer through\nena_com_mmio_reg_read_request_destroy(). However, if ena_probe() fails\nafter ena_device_init() succeeds, the error path destroys the admin\nresources and eventually frees ena_dev without destroying the MMIO read\nrequest, leaving the coherent DMA buffer allocated.\n\nCall ena_com_mmio_reg_read_request_destroy() in the probe error path\nbefore releasing the remaining device resources.\n\nThis issue was found by manual code inspection.",
  "id": "CVE-2026-98486",
  "modified": "2026-10-20T02:31:08.332816419Z",
  "published": "2026-10-18T15:16:03.002Z",
  "references": [
    {
      "type": "PACKAGE",
      "url": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/30ff01b4c7e419bb70f40f01dcd7f6af680808b3"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/47785f9f638b064ce6e32e8e3b6f1ffd83849fc2"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/7bd3e9a2d0c288e54f51df260d9433163f5fbc1e"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/9476b4468862927297c94c440863cd8ed1e7cc83"
    },
    {
      "type": "ADVISORY",
      "url": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/98xxx/CVE-2026-98486.json"
    },
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-98486"
    }
  ],
  "schema_version": "1.9.0",
  "summary": "net: ena: fix MMIO read buffer leak on probe failure"
}