CVE-2026-53217
kernel: net: mvpp2: sync RX data at the hardware packet offset
Loading…
Severity
ModerateRed Hat Product Security
CVSS
Review impact separately from score.
Published · June 25, 2026
Updated · October 20, 2026
Description
A flaw was found in the Linux kernel's mvpp2 network driver. This issue occurs because the driver incorrectly synchronizes received (RX) data at the hardware packet offset. On systems with non-coherent Direct Memory Access (DMA), this can lead to the Central Processing Unit (CPU) reading stale cache contents instead of the actual received network frame data. This vulnerability could result in information disclosure.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CWE-821 · Incorrect Synchronization