CVE-2026-98304

Received Received - Intake

BaseFortify

Publication date: 2026-10-06

Last updated on: 2026-10-19

Assigner: kernel.org

Description

In the Linux kernel, the following vulnerability has been resolved: net: bcmgenet: restore the hardware filters on open bcmgenet_hfb_init() runs INIT_LIST_HEAD() on priv->rxnfc_list, which drops every rule off the list, and bcmgenet_open() calls it on each ifup. Every rule the user configured is silently lost: # ethtool -N eth0 flow-type ether dst $MAC action 0 Added rule with ID 0 # ethtool -n eth0 | grep -c Filter: 1 # ip link set eth0 down && ip link set eth0 up # ethtool -n eth0 | grep -c Filter: 0 Initialise the lists once at probe and restore the rules on open, as bcmgenet_resume() already does.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-06

Last Modified

2026-10-19

Generated

2026-10-19

AI Q&A

2026-10-06

EPSS Evaluated

2026-10-18

NVD

CVE-2026-98304

EUVD

EUVD-2026-93289

Affected Vendors & Products

Vendor	Product	Version / Range
Linux	Linux	3e370952287c55e5fd240cb8bb41ef8acff8829d
Linux	Linux	3e370952287c55e5fd240cb8bb41ef8acff8829d
Linux	Linux	3e370952287c55e5fd240cb8bb41ef8acff8829d
Linux	Linux	5.8

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This vulnerability in the Linux kernel affects the bcmgenet network driver. When the network interface is brought down and up, hardware filters configured by the user are lost. This happens because bcmgenet_hfb_init() clears the list of rules during each interface open operation, causing silently dropped configurations.

Detection Guidance

This vulnerability can be detected by checking if hardware filters configured via ethtool are lost after a network interface is brought down and up. Use commands like 'ethtool -N eth0 flow-type ether dst $MAC action 0' to add a rule, then 'ip link set eth0 down && ip link set eth0 up' to simulate the issue. Verify with 'ethtool -n eth0' to see if the rule count drops to zero.

Impact Analysis

If you rely on hardware filters for network traffic management, this vulnerability could disrupt your configured rules when the network interface restarts. This may lead to unintended network behavior or security policy violations without warning.

Compliance Impact

This vulnerability causes loss of network filtering rules during network interface resets, which could disrupt security controls required for compliance with standards like GDPR or HIPAA. Without these filters, unauthorized network traffic might bypass monitoring or access controls, potentially violating data protection requirements.

Mitigation Strategies

Apply the Linux kernel patch that resolves this issue. Ensure your kernel version includes the fix for bcmgenet_hfb_init() and bcmgenet_open() to restore hardware filters on open. Monitor for updates from your Linux distribution.

Hi! I’m here to help you understand CVE-2026-98304. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70