CVE-2022-50877

Linux Kernel 5.12-5.14, 5.16-6.0.6, 6.1+ - Use-After-Free in bcm4908_enet TX Stats Update

Title source: llm

Description

In the Linux kernel, the following vulnerability has been resolved: net: broadcom: bcm4908_enet: update TX stats after actual transmission Queueing packets doesn't guarantee their transmission. Update TX stats after hardware confirms consuming submitted data. This also fixes a possible race and NULL dereference. bcm4908_enet_start_xmit() could try to access skb after freeing it in the bcm4908_enet_poll_tx().

References (3)

Core 3

Core References

Patch

https://git.kernel.org/stable/c/c9589e18a60c55c76772a38117ef9a16b942e56b

Patch

https://git.kernel.org/stable/c/2adedc80faec243ede55355e57142110d6f46e08

Patch

https://git.kernel.org/stable/c/ef3556ee16c68735ec69bd08df41d1cd83b14ad3

Scores

EPSS 0.0017

EPSS Percentile 6.9%

Details

Status published

Products (10)

linux/Kernel 5.12.0 - 5.15.77linux

linux/Kernel 5.16.0 - 6.0.7linux

Linux/Linux < 5.12

Linux/Linux 4feffeadbcb2e5b11cbbf191a33c245b74a5837b - 2adedc80faec243ede55355e57142110d6f46e08

Linux/Linux 4feffeadbcb2e5b11cbbf191a33c245b74a5837b - c9589e18a60c55c76772a38117ef9a16b942e56b

Linux/Linux 4feffeadbcb2e5b11cbbf191a33c245b74a5837b - ef3556ee16c68735ec69bd08df41d1cd83b14ad3

Linux/Linux 5.12

Linux/Linux 5.15.77 - 5.15.*

Linux/Linux 6.0.7 - 6.0.*

Linux/Linux 6.1

Published Dec 30, 2025

Tracked Since Feb 18, 2026