SB20261022424 - Out-of-bounds write in Linux kernel ethernet broadcom driver

CSH
CYBERSECURITY HELP
Sign In REGISTER

Main Vulnerability Database SB20261022424

SB20261022424 - Out-of-bounds write in Linux kernel ethernet broadcom driver

Published: October 22, 2026

Security Bulletin ID SB20261022424
CSH Severity
Low
Patch available
YES
Number of vulnerabilities 1
Exploitation vector Local access
Highest impact Denial of service

Breakdown by Severity

Low 100%
  • Low
  • Medium
  • High
  • Critical

Description

This security bulletin contains information about 1 vulnerability.


1) Out-of-bounds write (CVE-ID: CVE-2026-98808)

CWE-ID: CWE-787 - Out-of-bounds write

CVSSv4: 6.8 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]


The vulnerability allows a local user to corrupt kernel memory and potentially cause a denial of service.

The vulnerability exists due to an out-of-bounds write in bcm_sysport_get_stats() when collecting network interface statistics through ethtool. A local user can trigger statistics collection to potentially corrupt kernel memory because the function uses the full statistics index rather than the compacted destination index when writing to the allocated buffer.

The issue occurs on SYSTEMPORT Lite, where unsupported statistics are skipped during collection.


Remediation

Install update from vendor's website.

References