CVE-2026-53088 Details
Description
In the Linux kernel, the following vulnerability has been resolved: net: bcmgenet: fix off-by-one in bcmgenet_put_txcb The write_ptr points to the next open tx_cb. We want to return the tx_cb that gets rewinded, so we must rewind the pointer first then return the tx_cb that it points to. That way the txcb can be correctly cleaned up.
An off-by-one vulnerability has been identified and fixed in the Linux kernel's BCMGENET Ethernet driver. The issue arises in the 'bcmgenet_put_txcb' function, where the 'write_ptr' incorrectly points to the next available transmission control block (tx_cb) instead of the one that needs to be returned. This misalignment can lead to improper management of the tx_cb, potentially causing issues in the transmission process. The vulnerability affects the Linux kernel stable tree.
Users can apply the latest patch available in the Linux kernel stable tree to address this vulnerability.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
No SSVC data is available for this CVE.
References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://git.kernel.org/stable/c/14e9f86564fff7bcf7f45c1b69080e837b31d185 | kernel.org | Patch |
| https://git.kernel.org/stable/c/29394f722f620281f2ee9a47f947734e53d72c90 | kernel.org | Patch |
| https://git.kernel.org/stable/c/2a74590170427a3ca7cc4bb8690cdd559129c29c | kernel.org | Patch |
| https://git.kernel.org/stable/c/4cab761fc51c65aef741fcece4a18f3554edbc09 | kernel.org | Patch |
| https://git.kernel.org/stable/c/57f3f53d2c9c5a9e133596e2f7bc1c50688a6d38 | kernel.org | Patch |
| https://git.kernel.org/stable/c/72df896e31ddd06fcc5a789f025ad7a62a18bc9b | kernel.org | Patch |
| https://git.kernel.org/stable/c/85f34ec320d3881badfd4edc5fee5cd5012bb54d | kernel.org | Patch |
| https://git.kernel.org/stable/c/fb9a3c1f547d0ff024dbfe7b6f327626ddf0a3de | kernel.org | Patch |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-193 | Off-by-one Error | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| linux linux kernel | >= 3.16.50, < 3.17 >= 4.13.1, < 5.10.258 >= 5.11, < 5.15.209 >= 5.16, < 6.1.175 >= 6.2, < 6.6.141 >= 6.7, < 6.12.91 >= 6.13, < 6.18.33 >= 6.19, < 7.0.10 4.13 - 4.13 rc2 4.13 rc3 4.13 rc4 4.13 rc5 4.13 rc6 4.13 rc7 |
CPE
Remediation
| |
Change History
3 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jul 23, 2026 | Initial Analysis | [email protected] |
| Jun 28, 2026 | CVE Modified | kernel.org |
| Jun 24, 2026 | New CVE Received | kernel.org |