CVE-2026-53088
CriticalCVSS 9.8Exploitation Probability (EPSS)
Low risk32th percentile - higher than 32% of all known CVEs
Summary
Vulnerability in the Linux kernel in the bcmgenet driver (Broadcom GENET Ethernet) due to an off-by-one error in bcmgenet_put_txcb. Incorrect pointer rewind may lead to improper cleanup of the transmit buffer.
Risk Assessment
Risk of potential system crash or network malfunction on systems using the bcmgenet driver.
Recommendation
Apply the Linux kernel patch containing the fix for the bcmgenet driver.
Original NVD description (English source)
In the Linux kernel, the following vulnerability has been resolved: net: bcmgenet: fix off-by-one in bcmgenet_put_txcb The write_ptr points to the next open tx_cb. We want to return the tx_cb that gets rewinded, so we must rewind the pointer first then return the tx_cb that it points to. That way the txcb can be correctly cleaned up.