BCMGenet Network Driver Timeout Handling Race Condition

Publication date: 2026-06-24

Last updated on: 2026-07-14

Assigner: kernel.org

Description

In the Linux kernel, the following vulnerability has been resolved: net: bcmgenet: fix racing timeout handler The bcmgenet_timeout handler tries to take down all tx queues when a single queue times out. This is over zealous and causes many race conditions with queues that are still chugging along. Instead lets only restart the timed out queue.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-06-24

Last Modified

2026-07-14

Generated

2026-07-15

AI Q&A

2026-06-24

EPSS Evaluated

2026-07-13

NVD

CVE-2026-53086

EUVD

EUVD-2026-38954

Affected Vendors & Products

Vendor	Product	Version / Range
linux	linux_kernel	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This vulnerability exists in the Linux kernel's bcmgenet network driver. The issue is with the bcmgenet_timeout handler, which attempts to take down all transmit (tx) queues when a single queue times out. This approach is overly aggressive and leads to race conditions with other queues that are still functioning properly. The fix involves modifying the handler to only restart the specific queue that timed out, preventing unnecessary interference with other queues.

Impact Analysis

The vulnerability can cause race conditions in the network driver when a single transmit queue times out. This may lead to instability or degraded network performance because all transmit queues are taken down unnecessarily instead of just the affected one. Such behavior could result in network disruptions or reduced reliability in systems using the affected Linux kernel version.

Hi! I’m here to help you understand CVE-2026-53086. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70