CVE Database›Document archive›CVE-2026-98574

CVE-2026-98574

kernel: net: bcmgenet: stop Tx NAPI before disabling the queues

Loading…

Severity

Moderate

Red Hat Product Security

4.1

CVSS 3.1

Review impact separately from score.

Published · October 18, 2026

Updated · October 20, 2026

Description

A flaw was found in the Linux kernel's Broadcom GENET network driver. Improper synchronization between disabling transmission queues and stopping completion polling during interface shutdown or suspend operations can prematurely re-enable a queue. This race condition allows packet transmission to access freed memory buffers, causing a use-after-free condition. A local user could exploit this issue during device reconfiguration to trigger memory corruption, leading to a Denial of Service (DoS) via a system crash.

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CVSS 3.1 · 4.1
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H

CWE-825 · Expired Pointer Dereference