CVE Database›Document archive›CVE-2026-64125

CVE-2026-64125

kernel: net: bcmgenet: keep RBUF EEE/PM disabled

Loading…

Severity

Moderate

Red Hat Product Security

7.5

CVSS 3.1

Review impact separately from score.

Published · July 19, 2026

Updated · November 1, 2026

Description

A flaw was found in the Linux kernel's bcmgenet network driver. When Energy Efficient Ethernet (EEE) is active on GENET hardware, a misconfiguration in the receive buffer (RBUF) can cause network traffic to stop flowing. This leads to a denial of service for network communications and may result in memory corruption, potentially causing system instability.

Statement

This vulnerability is rated as Moderate severity because it requires specific Broadcom GENET network hardware and active Energy Efficient Ethernet negotiation, limiting its reach primarily to specialized embedded or single-board deployments rather than standard enterprise servers. While the condition can disrupt packet reception and potentially trigger a kernel paging fault leading to a denial of service, exploitation requires physical network attachment and does not provide arbitrary code execution. Systems lacking this specific Broadcom Ethernet controller are entirely unaffected.

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

CVSS / CWE

CVSS 3.1 · 7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-754 · Improper Check for Unusual or Exceptional Conditions