CVE-2026-53088
Awaiting Analysis
Awaiting Analysis - Queue
BCMGenet Driver Off-by-One Error in Linux Kernel
Vulnerability report for CVE-2026-53088, including description, CVSS score, EPSS score, affected products, exploitability, helpful resources, and attack-flow context.
Publication date: 2026-06-24
Last updated on: 2026-07-23
Assigner: kernel.org
Description
Description
In the Linux kernel, the following vulnerability has been resolved:
net: bcmgenet: fix off-by-one in bcmgenet_put_txcb
The write_ptr points to the next open tx_cb. We want to return the
tx_cb that gets rewinded, so we must rewind the pointer first then
return the tx_cb that it points to. That way the txcb can be correctly
cleaned up.
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| linux | linux_kernel | 4.13 |
| linux | linux_kernel | 4.13 |
| linux | linux_kernel | 4.13 |
| linux | linux_kernel | 4.13 |
| linux | linux_kernel | 4.13 |
| linux | linux_kernel | 4.13 |
| linux | linux_kernel | From 3.16.50 (inc) to 3.17 (exc) |
| linux | linux_kernel | From 6.2 (inc) to 6.6.141 (exc) |
| linux | linux_kernel | From 6.7 (inc) to 6.12.91 (exc) |
| linux | linux_kernel | From 6.13 (inc) to 6.18.33 (exc) |
| linux | linux_kernel | From 6.19 (inc) to 7.0.10 (exc) |
| linux | linux_kernel | From 5.16 (inc) to 6.1.175 (exc) |
| linux | linux_kernel | From 5.11 (inc) to 5.15.209 (exc) |
| linux | linux_kernel | From 4.13.1 (inc) to 5.10.258 (exc) |
| linux | linux_kernel | 4.13 |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-193 | A product calculates or uses an incorrect maximum or minimum value that is 1 more, or 1 less, than the correct value. |