CVE-2022-50877net: broadcom: bcm4908_enet: update TX stats after actual transmission
Updated under an hour ago ()
Does this affect you?
It affects Linux. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: net: broadcom: bcm4908_enet: update TX stats after actual transmission Queueing packets doesn't guarantee their transmission. Update TX stats after hardware confirms consuming submitted data. This also fixes a possible race and NULL dereference. bcm4908_enet_start_xmit() could try to access skb after freeing it in the bcm4908_enet_poll_tx().
- CVSS
- Not yet scored
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Deferred
- Record last updated
- May 11, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
Linux Linux linux:linux (from the name) | from 4feffeadbcb2e5b11cbbf191a33c245b74a5837b before c9589e18a60c55c76772a38117ef9a16b942e56b; 4feffeadbcb2e5b11cbbf191a33c245b74a5837b builds before 2adedc80faec243ede55355e57142110d6f46e08; from 4feffeadbcb2e5b11cbbf191a33c245b74a5837b before ef3556ee16c68735ec69bd08df41d1cd83b14ad3 | CNA record |
References
- https://git.kernel.org/stable/c/c9589e18a60c55c76772a38117ef9a16b942e56b
- https://git.kernel.org/stable/c/2adedc80faec243ede55355e57142110d6f46e08
- https://git.kernel.org/stable/c/ef3556ee16c68735ec69bd08df41d1cd83b14ad3
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.