CVE-2026-46110

kernel: net: stmmac: Prevent NULL deref when RX memory exhausted

Loading…

Severity

Moderate

Red Hat Product Security

—

CVSS

Review impact separately from score.

Published · May 28, 2026

Updated · October 20, 2026

Description

A flaw was found in the Linux kernel's stmmac driver. When the system experiences receive (RX) memory exhaustion, the stmmac_rx() function can misinterpret already-processed data descriptors as valid, leading to a NULL pointer dereference. This vulnerability can cause the system to panic, resulting in a Denial of Service (DoS).

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CWE-476 · NULL Pointer Dereference