CVE-2026-64125
kernel: net: bcmgenet: keep RBUF EEE/PM disabled
Severity
ModerateRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · July 19, 2026
Updated · November 1, 2026
Description
A flaw was found in the Linux kernel's bcmgenet network driver. When Energy Efficient Ethernet (EEE) is active on GENET hardware, a misconfiguration in the receive buffer (RBUF) can cause network traffic to stop flowing. This leads to a denial of service for network communications and may result in memory corruption, potentially causing system instability.
Statement
This vulnerability is rated as Moderate severity because it requires specific Broadcom GENET network hardware and active Energy Efficient Ethernet negotiation, limiting its reach primarily to specialized embedded or single-board deployments rather than standard enterprise servers. While the condition can disrupt packet reception and potentially trigger a kernel paging fault leading to a denial of service, exploitation requires physical network attachment and does not provide arbitrary code execution. Systems lacking this specific Broadcom Ethernet controller are entirely unaffected.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
CVSS / CWE
CVSS 3.1 · 7.5CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-754 · Improper Check for Unusual or Exceptional Conditions