CVE-2026-53216
kernel: net: mvpp2: limit XDP frame size to the RX buffer
Loading…
Severity
ModerateRed Hat Product Security
CVSS
Review impact separately from score.
Published · June 25, 2026
Updated · October 20, 2026
Description
A flaw was found in the Linux kernel's mvpp2 network driver. This vulnerability arises from improper handling of the eXpress Data Path (XDP) frame size, where the system advertises a larger frame size than the actual allocated buffer for short buffer pools. This can allow the bpf_xdp_adjust_tail() function to write data beyond the intended memory boundary, leading to memory corruption. Such corruption could potentially result in system instability or denial of service.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CWE-787 · Out-of-bounds Write