CVE-2026-72060
kernel: net: ethernet: ti: icssg: guard PA stat lookups
Severity
ModerateRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · August 15, 2026
Updated · October 30, 2026
Description
A flaw was found in the Linux kernel's Texas Instruments (TI) Industrial Communication Subsystem Gigabit (ICSSG) ethernet driver. This vulnerability occurs because the driver attempts to read hardware performance statistics even when they are unavailable. This leads to the silent corruption of network interface counters, such as those for received errors or dropped packets, which can provide inaccurate information about network performance.
Statement
This vulnerability is rated as having a Moderate impact because exploitation requires local access on systems equipped with specialized Texas Instruments hardware and results primarily in inaccurate interface statistics and excessive kernel log messages. Red Hat Enterprise Linux products are not affected by this flaw as the vulnerable code introduced in upstream kernels is not present in supported releases.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.1 · 5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CWE-190 · Integer Overflow or Wraparound