CVE-2026-23438
kernel: net: mvpp2: guard flow control update with global_tx_fc in buffer switching
Loading…
Severity
UnknownRed Hat Product Security
CVSS
Review impact separately from score.
Published · April 3, 2026
Updated · June 28, 2026
Description
A flaw was found in the Linux kernel's mvpp2 driver. A local privileged user could cause a system crash, leading to a Denial of Service (DoS), by triggering a null pointer dereference. This occurs when changing the Maximum Transmission Unit (MTU) on systems where the CM3 SRAM resource is not present, due to improper handling of hardware access in the mvpp2_bm_switch_buffers() function.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CWE-476 · NULL Pointer Dereference