CVE-2026-99192
kernel: kernel: Denial of Service via shared packet buffer handling in bcmgenet
Severity
ModerateRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · October 28, 2026
Updated · November 3, 2026
Description
A flaw was found in the Linux kernel's Broadcom GENET (bcmgenet) ethernet driver, which can lead to a Denial of Service (DoS). When handling shared network packet buffers, the driver overwrites control block metadata while earlier packets are still pending in the transmission ring. This issue causes Byte Queue Limits (BQL) accounting to stall the network transmit queue until a watchdog timer resets the interface.
Statement
This vulnerability is rated as Moderate impact because it requires local access to trigger and exclusively impacts systems utilizing Broadcom GENET network controllers. In standard Red Hat enterprise environments, this specialized driver is not utilized on mainstream server architectures and is constrained to specific ARM platforms. An attacker can only cause a local denial of service through stalled transmission queues on the affected network interface, without compromising data confidentiality or system integrity.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.1 · 4.7CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
CWE-820 · Missing Synchronization