CVE Database›Document archive›CVE-2026-99192

CVE-2026-99192

kernel: kernel: Denial of Service via shared packet buffer handling in bcmgenet

Loading…

Severity

Moderate

Red Hat Product Security

4.7

CVSS 3.1

Review impact separately from score.

Published · October 28, 2026

Updated · November 3, 2026

Description

A flaw was found in the Linux kernel's Broadcom GENET (bcmgenet) ethernet driver, which can lead to a Denial of Service (DoS). When handling shared network packet buffers, the driver overwrites control block metadata while earlier packets are still pending in the transmission ring. This issue causes Byte Queue Limits (BQL) accounting to stall the network transmit queue until a watchdog timer resets the interface.

Statement

This vulnerability is rated as Moderate impact because it requires local access to trigger and exclusively impacts systems utilizing Broadcom GENET network controllers. In standard Red Hat enterprise environments, this specialized driver is not utilized on mainstream server architectures and is constrained to specific ARM platforms. An attacker can only cause a local denial of service through stalled transmission queues on the affected network interface, without compromising data confidentiality or system integrity.

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CVSS 3.1 · 4.7
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

CWE-820 · Missing Synchronization