CVE-2026-53086: net: bcmgenet: fix racing timeout handler
In the Linux kernel, the following vulnerability has been resolved:
Other sources
net: bcmgenet: fix racing timeout handler
— Microsoft
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 6.6.143.1-1 - Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.1.176-1Fixed in 6.1.180-1Fixed in 6.12.94-1Fixed in 6.12.101-1Fixed in 7.1.8-1Fixed in 7.1.8-2 - Upgrade
Upgrade
debian/linux-6.1to a version that resolves this vulnerability.Fixed in 6.1.180-1~deb11u1 - Configuration
Update the bcmgenet_timeout handler behavior so that when a single TX queue times out, it restarts only that timed out queue rather than taking down all TX queues.
Linux kernel (net: bcmgenet) bcmgenet_timeout queue restart behavior = restart only the timed out TX queue instead of taking down all TX queues
Event History
Frequently Asked Questions
What is the severity of CVE-2026-53086?
CVE-2026-53086 has a critical severity score of 9.8.
How do I fix CVE-2026-53086?
To fix CVE-2026-53086, ensure that your Linux kernel and bcmgenet driver are updated to the latest versions that include the patch.
What are the potential impacts of CVE-2026-53086?
CVE-2026-53086 can lead to multiple race conditions due to the bcmgenet_timeout handler incorrectly managing transmission queues.
Which systems are affected by CVE-2026-53086?
CVE-2026-53086 affects systems running the Linux kernel with the bcmgenet driver, including Microsoft azl3 kernel 6.6.139.1-1.
When was CVE-2026-53086 published?
CVE-2026-53086 was published on June 24, 2026.