CVE-2026-99192

In the Linux kernel, the following vulnerability has been resolved: net: bcmgenet: unshare the skb before writing the control block bcmgenet stores firstcb, lastcb and bytessent in the skb control block and reads them back on completion to free the skb and credit BQL. ethersetup leaves...

EUVD-2026-111944

In the Linux kernel, the following vulnerability has been resolved: net: bcmgenet: unshare the skb before writing the control block bcmgenet stores firstcb, lastcb and bytessent in the skb control block and reads them back on completion to free the skb and credit BQL. ethersetup leaves...

CVE-2026-99192

The Linux kernel 's bcmgenet driver is vulnerable to a bug where it fails to unshare the skb (socket buffer) before writing to the control block. Because ether_setup() leaves IFF_TX_SKB_SHARING set, the stack can resubmit a shared skb while it is still in the ring. This causes the next transmit t...

PT-2026-128185

In the Linux kernel, the following vulnerability has been resolved: net: bcmgenet: unshare the skb before writing the control block bcmgenet stores first cb, last cb and bytes sent in the skb control block and reads them back on completion to free the skb and credit BQL. ether setup leaves IFF TX...