CVE Database›Document archive›CVE-2026-53217

CVE-2026-53217

kernel: net: mvpp2: sync RX data at the hardware packet offset

Loading…

Severity

Moderate

Red Hat Product Security

—

CVSS

Review impact separately from score.

Published · June 25, 2026

Updated · October 20, 2026

Description

A flaw was found in the Linux kernel's mvpp2 network driver. This issue occurs because the driver incorrectly synchronizes received (RX) data at the hardware packet offset. On systems with non-coherent Direct Memory Access (DMA), this can lead to the Central Processing Unit (CPU) reading stale cache contents instead of the actual received network frame data. This vulnerability could result in information disclosure.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CWE-821 · Incorrect Synchronization