CVE Database›Document archive›CVE-2026-53216

CVE-2026-53216

kernel: net: mvpp2: limit XDP frame size to the RX buffer

Loading…

Severity

Moderate

Red Hat Product Security

—

CVSS

Review impact separately from score.

Published · June 25, 2026

Updated · October 20, 2026

Description

A flaw was found in the Linux kernel's mvpp2 network driver. This vulnerability arises from improper handling of the eXpress Data Path (XDP) frame size, where the system advertises a larger frame size than the actual allocated buffer for short buffer pools. This can allow the bpf_xdp_adjust_tail() function to write data beyond the intended memory boundary, leading to memory corruption. Such corruption could potentially result in system instability or denial of service.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CWE-787 · Out-of-bounds Write