Use-after-free in Linux kernel - CVE-2026-98574

Vulnerability details

The vulnerability allows a local privileged user to corrupt kernel memory and potentially cause a denial of service.

The vulnerability exists due to a use-after-free in the Linux kernel bcmgenet Ethernet driver when transmit queues are disabled before transmit NAPI processing stops. A local privileged user can trigger an affected interface transition while transmit completions are in flight to cause a queue to be reawakened and a subsequent transmission to write to freed transmit rings, potentially crashing the system.

Affected software

How to mitigate CVE-2026-98574

External References

• https://git.kernel.org/stable/c/63bcc2fee6419963e45e7c2cd698fa862409601d
• https://git.kernel.org/stable/c/7e87508b5c4d81210d0a736ed01962e52f5c4c56
• https://git.kernel.org/stable/c/f329d42423089904758f2685cda295de9bf99441

Related Security Bulletins

• Use-after-free in Linux kernel broadcom genet driver