CVE-2026-98304 net: bcmgenet: restore the hardware filters on open
A flaw in the Linux kernel's bcmgenet driver causes network flow filters to be lost on interface restart, potentially bypassing security controls.
- Exploited in the wild
- Not known
- Login needed
- An administrator
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2026-98304?
CVE-2026-98304 is a missing authorization vulnerability in Linux, published on 6 Oct 2026. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
In the Linux kernel, the following vulnerability has been resolved:
net: bcmgenet: restore the hardware filters on open
bcmgenet_hfb_init() runs INIT_LIST_HEAD() on priv->rxnfc_list, which drops every rule off the list, and bcmgenet_open() calls it on each ifup. Every rule the user configured is silently lost:
# ethtool -N eth0 flow-type ether dst $MAC action 0 Added rule with ID 0 # ethtool -n eth0 | grep -c Filter: 1 # ip link set eth0 down && ip link set eth0 up # ethtool -n eth0 | grep -c Filter: 0
Initialise the lists once at probe and restore the rules on open, as bcmgenet_resume() already does.
Which versions are affected by CVE-2026-98304?
How do I fix CVE-2026-98304?
Apply the vendor's patch.
Upgrade, and check permissions on every request on the server, not only in the interface. More about Missing authorization.
Is CVE-2026-98304 being exploited?
There is no known exploitation of CVE-2026-98304 in the wild and no public exploit code.
Sources
Also known as AZL-106386, BELL-CVE-2026-98304, DEBIAN-CVE-2026-98304, GHSA-3cc5-5jg6-g6px, UBUNTU-CVE-2026-98304.