CVE-2026-98030

A flaw was found in the Linux kernel's Broadcom Starfighter 2 (bcm_sf2) network switch driver. An unprivileged local user can exploit this vulnerability by issuing a network control request to retrieve classification rules while providing a buffer size smaller than the number of active rules. Because the driver does not validate the user-supplied buffer limit, it can write data beyond the allocated memory or dereference a null pointer, leading to kernel memory corruption or a Denial of Service (DoS).

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.