CVE-2026-72060: net: ethernet: ti: icssg: guard PA stat lookups
In the Linux kernel, the following vulnerability has been resolved:
net: ethernet: ti: icssg: guard PA stat lookups
icssgndogetstats64() unconditionally calls emacgetstatbyname() with FW PA stat names regardless of whether the PA stats block is present on the hardware. emacgetstatbyname() already guards the PA stats lookup with if (emac->prueth->pastats); when that pointer is NULL the lookup falls through to netdeverr() and returns -EINVAL. Because ndogetstats64 is polled regularly by the networking stack this produces thousands of log entries of the form:
icssg-prueth icssg1-eth end0: Invalid stats FWRXERROR
A secondary consequence is that the int(-EINVAL) return value is implicitly widened to a near-ULLONGMAX unsigned value when accumulated into the u64 fields of rtnllinkstats64, silently corrupting the rxerrors, rxdropped and txdropped counters reported by ip -s link.
Every other PA-aware code path in the driver is already guarded with the same if (emac->prueth->pastats) check. Apply the same guard here.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-72060?
CVE-2026-72060 has been assigned a risk score of 12, indicating a high severity vulnerability.
How do I fix CVE-2026-72060?
Fixing CVE-2026-72060 involves updating to the latest stable Linux kernel version that includes the patch addressing this vulnerability.
What impact does CVE-2026-72060 have on system security?
CVE-2026-72060 can lead to potential denial of service or system instability if the PA stats block is not present on the hardware.
Is CVE-2026-72060 specific to certain Linux kernel versions?
Yes, CVE-2026-72060 affects specific versions of the Linux kernel that utilize the icssg driver for Ethernet communications.
How can administrators check if they are affected by CVE-2026-72060?
Administrators can verify their kernel version and configuration to see if they utilize the affected icssg driver related to CVE-2026-72060.