CVE-2026-53086

A flaw was found in the Linux kernel's bcmgenet network driver. This vulnerability arises from an overly aggressive timeout handler that attempts to reset all network transmission queues when only one experiences an issue. This behavior can create race conditions, potentially leading to system instability or a denial of service, where network services become unavailable.

The bcmgenet TX timeout handler could perform global recovery when only one TX queue timed out, including reclaim and wake operations for queues that were still active. This creates race conditions in the network driver TX path and may lead to network disruption, driver malfunction, or kernel availability impact. For the CVSS the PR:N is used in the paranoid vector because an adjacent network attacker may be able to influence traffic conditions without a local account, but reliable triggering is hardware and workload dependent. The issue is not a direct packet parsing bug and no concrete UAF or OOB primitive is visible from the patch. Impact is treated as denial of service rather than confirmed privilege escalation or information disclosure.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.