CVE-2026-53088

CRITICAL

net: bcmgenet: fix off-by-one in bcmgenet_put_txcb

Title source: cna
STIX 2.1

Description

In the Linux kernel, the following vulnerability has been resolved: net: bcmgenet: fix off-by-one in bcmgenet_put_txcb The write_ptr points to the next open tx_cb. We want to return the tx_cb that gets rewinded, so we must rewind the pointer first then return the tx_cb that it points to. That way the txcb can be correctly cleaned up.

References (8)

Core 8

Scores

CVSS v3 9.8
EPSS 0.0040
EPSS Percentile 32.5%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Details

Status published
Products (27)
linux/Kernel 4.13.0 - 5.10.258linux
linux/Kernel 5.11.0 - 5.15.209linux
linux/Kernel 5.16.0 - 6.1.175linux
linux/Kernel 6.13.0 - 6.18.33linux
linux/Kernel 6.19.0 - 7.0.10linux
linux/Kernel 6.2.0 - 6.6.141linux
linux/Kernel 6.7.0 - 6.12.91linux
Linux/Linux < 4.13
Linux/Linux 3.16.50 - 3.17
Linux/Linux 3bdf77194ea822390b405639b77659071fd2c2e9
... and 17 more
Published Jun 24, 2026
Tracked Since Jun 24, 2026