Skip to content
CVE PROGRAM SOURCE RECORD9.8 Critical

CVE-2026-53088

net: bcmgenet: fix off-by-one in bcmgenet_put_txcb

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: net: bcmgenet: fix off-by-one in bcmgenet_put_txcb The write_ptr points to the next open tx_cb. We want to return the tx_cb that gets rewinded, so we must rewind the pointer first then return the tx_cb that it points to. That way the txcb can be correctly cleaned up.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 876dbadd53a7102e2a84afc84ea2bd3ee6dc5636 to < 14e9f86564fff7bcf7f45c1b69080e837b31d185affected
  • 876dbadd53a7102e2a84afc84ea2bd3ee6dc5636 to < fb9a3c1f547d0ff024dbfe7b6f327626ddf0a3deaffected
  • 876dbadd53a7102e2a84afc84ea2bd3ee6dc5636 to < 85f34ec320d3881badfd4edc5fee5cd5012bb54daffected
  • 876dbadd53a7102e2a84afc84ea2bd3ee6dc5636 to < 2a74590170427a3ca7cc4bb8690cdd559129c29caffected
  • 876dbadd53a7102e2a84afc84ea2bd3ee6dc5636 to < 29394f722f620281f2ee9a47f947734e53d72c90affected
  • 876dbadd53a7102e2a84afc84ea2bd3ee6dc5636 to < 4cab761fc51c65aef741fcece4a18f3554edbc09affected
  • 876dbadd53a7102e2a84afc84ea2bd3ee6dc5636 to < 72df896e31ddd06fcc5a789f025ad7a62a18bc9baffected
  • 876dbadd53a7102e2a84afc84ea2bd3ee6dc5636 to < 57f3f53d2c9c5a9e133596e2f7bc1c50688a6d38affected
  • 3bdf77194ea822390b405639b77659071fd2c2e9affected
  • 3.16.50 to < 3.17affected

Linux Linux

Default version status: affected

  • 4.13affected
  • 0 to < 4.13unaffected
  • 5.10.258 to ≤ 5.10.*unaffected
  • 5.15.209 to ≤ 5.15.*unaffected
  • 6.1.175 to ≤ 6.1.*unaffected
  • 6.6.141 to ≤ 6.6.*unaffected
  • 6.12.91 to ≤ 6.12.*unaffected
  • 6.18.33 to ≤ 6.18.*unaffected
  • 7.0.10 to ≤ 7.0.*unaffected
  • 7.1 to ≤ *unaffected

References