CVE-2022-50877
Unknown Unknown - Not Provided

Use-After-Free and Race Condition in Linux bcm4908_enet Driver

Publication date: 2025-12-30

Last updated on: 2025-12-30

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: net: broadcom: bcm4908_enet: update TX stats after actual transmission Queueing packets doesn't guarantee their transmission. Update TX stats after hardware confirms consuming submitted data. This also fixes a possible race and NULL dereference. bcm4908_enet_start_xmit() could try to access skb after freeing it in the bcm4908_enet_poll_tx().

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2025-12-30
Last Modified
2025-12-30
Generated
2026-07-06
AI Q&A
2025-12-30
EPSS Evaluated
2026-07-05
NVD
CVE-2022-50877
EUVD
EUVD-2022-55919

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
broadcom bcm4908_enet *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability in the Linux kernel's Broadcom bcm4908_enet driver involves incorrect handling of transmission statistics and a potential race condition. Specifically, the driver was updating TX (transmit) statistics before the hardware actually confirmed the transmission of packets, which could lead to inaccurate stats. Additionally, there was a possible race condition and NULL pointer dereference where the function bcm4908_enet_start_xmit() might access a socket buffer (skb) after it had already been freed by bcm4908_enet_poll_tx(). The fix updates TX stats only after hardware confirms transmission and addresses the race and NULL dereference issues.

Impact Analysis

This vulnerability can lead to inaccurate transmission statistics, which may affect network monitoring and diagnostics. The race condition and NULL pointer dereference could potentially cause kernel crashes or instability, impacting system reliability and availability.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2022-50877. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart