CVE-2026-98052
Received Received - Intake

Linux Kernel Use-After-Free in BCMASP Driver

Publication date: 2026-09-25

Last updated on: 2026-09-25

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: net: bcmasp: clear txcb->last before writing each descriptor bcmasp_xmit() only wrote txcb->last = true for the final fragment of an SKB; non-final fragments left the field untouched. If a descriptor slot was reused while it still held a stale true from a previous SKB (possible when tx_spb_ring_full() underreported fullness), bcmasp_tx_reclaim() would see last == true mid-SKB and call dev_consume_skb_any() prematurely, freeing the sk_buff while its remaining fragments were still in flight. Unconditionally clear txcb->last before the conditional set so every descriptor slot starts from a known false state regardless of what a prior transmission left behind.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-25
Last Modified
2026-09-25
Generated
2026-09-25
AI Q&A
2026-09-25
EPSS Evaluated
N/A
NVD
CVE-2026-98052
EUVD
EUVD-2026-86705

Affected Vendors & Products

Currently, no data is known.

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This is a Linux kernel vulnerability in the bcmasp network driver. It involves a bug where the txcb->last flag is not properly cleared before writing each descriptor. This can cause the driver to prematurely free an sk_buff while its fragments are still in use, leading to potential data corruption or crashes.

Detection Guidance

This vulnerability is specific to the Linux kernel's bcmasp network driver. Detection requires checking if your system uses the affected driver version. Inspect kernel logs for bcmasp-related errors or crashes during network transmission. No direct commands are provided in the context to detect this issue.

Impact Analysis

This vulnerability could cause network instability or crashes on systems using the bcmasp driver. It may lead to data loss or corruption if network packets are improperly handled during transmission.

Mitigation Strategies

Apply the latest kernel update that includes the fix for this vulnerability. If updating is not immediately possible, avoid using the bcmasp network driver until patched. Monitor kernel logs for unusual network-related errors or crashes.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-98052. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart