CVE-2026-53088 net: bcmgenet: fix off-by-one in bcmgenet_put_txcb
An off-by-one error in the Broadcom GENET network driver can lead to incorrect memory cleanup, potentially causing a denial of service.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2026-53088?
CVE-2026-53088 is a critical vulnerability in Linux kernel, published on 24 Jun 2026. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
In the Linux kernel, the following vulnerability has been resolved:
net: bcmgenet: fix off-by-one in bcmgenet_put_txcb
The write_ptr points to the next open tx_cb. We want to return the tx_cb that gets rewinded, so we must rewind the pointer first then return the tx_cb that it points to. That way the txcb can be correctly cleaned up.
Weakness: CWE-193
Which versions are affected by CVE-2026-53088?
It affects 1 product.
Products include Linux kernel.
How do I fix CVE-2026-53088?
Apply the vendor's patch.
Is CVE-2026-53088 being exploited?
There is no known exploitation of CVE-2026-53088 in the wild and no public exploit code.
Other vulnerabilities in Linux kernel
Sources
Also known as BELL-CVE-2026-53088, DEBIAN-CVE-2026-53088, GHSA-mqvv-mhq8-mx45, ROOT-OS-UBUNTU-2204-CVE-2026-53088, ROOT-OS-UBUNTU-2404-CVE-2026-53088, UBUNTU-CVE-2026-53088.