CVE-2026-98052

A flaw was found in the Linux kernel's Broadcom ASP2.0 Ethernet driver. This vulnerability can result in a Denial of Service (DoS) or system instability due to premature memory deallocation. When handling fragmented network packets, the driver fails to properly clear state flags before reusing transmission descriptor slots, incorrectly marking an in-flight packet as finished. An attacker capable of sending network traffic could trigger this condition to prematurely free active network buffers while they are still in use, causing a kernel crash.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.