CVE record · CVE-2026-98594

tg3: clean up PHYLIB resources on probe failure

No CVSS scoreEPSS 0.0022 · 12th percentile

Published by the CVE Program (CNA: Linux) at 18 Oct 2026, 15:19 UTC. agentprime has not analysed this yet, so whether it affects any app is not known. This CVE names a vendor and product rather than a package, so the lockfile check doesn’t match it.

Affected products, as the CNA wrote them
VendorProductVersions
Linux Linux
  • affected 158d7abdae85e9ac43d99780c372d79c119f7626 to before ce86d6929d03e6b0abcb781dfa50f9f0816bff78 git
  • affected 158d7abdae85e9ac43d99780c372d79c119f7626 to before a449eedb3b1eb5b8b1f5ed116a1bfe85eaaf81df git
  • affected 158d7abdae85e9ac43d99780c372d79c119f7626 to before 0844402326d4e48a28688f93ec6442e93bb442fa git
  • affected 158d7abdae85e9ac43d99780c372d79c119f7626 to before e766321288b507afb70d2bfef6ba443213329f79 git
  • affected 158d7abdae85e9ac43d99780c372d79c119f7626 to before d2abb0013b933d59ee441185df0eca9e8c0b33eb git
  • affected 158d7abdae85e9ac43d99780c372d79c119f7626 to before 6515c41503eef849abd2c7364f34e4bb25110f90 git
  • affected 158d7abdae85e9ac43d99780c372d79c119f7626 to before b6c0c757c65893ad7bb17e8bcf33cdd8257d7b3d git
  • affected 158d7abdae85e9ac43d99780c372d79c119f7626 to before a92e1a412c53dc0d9ad639e7abf8b3fc70a5b6ad git
Other versions: unaffected
Linux Linux
  • affected 2.6.27
  • unaffected before 2.6.27 semver
  • unaffected 5.10.271 to 5.10.*, inclusive semver
  • unaffected 5.15.222 to 5.15.*, inclusive semver
  • unaffected 6.1.189 to 6.1.*, inclusive semver
  • unaffected 6.6.158 to 6.6.*, inclusive semver
  • unaffected 6.12.112 to 6.12.*, inclusive semver
  • unaffected 6.18.55 to 6.18.*, inclusive semver
  • unaffected 7.2.9 to 7.2.*, inclusive semver
  • unaffected 7.3 to *, inclusive original_commit_for_fix
Other versions: affected
Identifiers
CVE-2026-98594
CNA
Linux
Published
18 Oct 2026
Updated
19 Oct 2026

Not analysed yet

We haven’t published our own analysis of this CVE. If a person reviews it, this page will say what’s affected and what has to be true for it to matter.

Severity and exploitation

No source has published a CVSS score for this record yet.

  • CISA KEV Not listed.
  • EPSS 0.0022, the 12th percentile, on 8 Nov 2026: FIRST’s estimate of the chance of exploitation in the next 30 days.

Timeline

This record came from the full history of the CVE Program, published 18 Oct 2026. New records show when each source confirmed them.

Sources

References from the CNA

Facts on this page come from the CVE List as the CNA published them, with CVSS from the sources named above, CISA KEV and FIRST EPSS. Vendors, products and versions are shown as the CNA wrote them. We don’t reproduce the CVE’s description.