CVE-2026-53088
kernel: net: bcmgenet: fix off-by-one in bcmgenet_put_txcb
Severity
LowRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · June 24, 2026
Updated · October 30, 2026
Description
A flaw was found in the Linux kernel's bcmgenet network driver. An off-by-one error in the bcmgenet_put_txcb function, related to the write_ptr handling for transmit control blocks (tx_cb), could lead to incorrect cleanup of these blocks. This issue may result in system instability or unexpected behavior.
Statement
Red Hat has evaluated this vulnerability as having a Low impact because it is restricted to hardware running the Broadcom GENET Ethernet controller, which is not deployed in standard enterprise server environments. Exploitation requires local access on a host equipped with this specialized controller, substantially limiting the attack surface. Under these conditions, an improper rewind calculation when releasing transmit buffers can lead to driver instability or resource mismanagement, without compromising confidentiality or data integrity.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.1 · 5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CWE-193 · Off-by-one Error