Security Advisory

CVE-2026-64056

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-07-19 15:39:37
Last updated 2026-07-20 13:42:53
Assigner Linux
CVSS score 9.8
State PUBLISHED

Description

In the Linux kernel, the following vulnerability has been resolved: net: ethernet: cortina: Make RX SKB per-port The SKB used to assemble packets from fragments in gmac_rx() is static local, but the Gemini has two ethernet ports, meaning there can be races between the ports on a bad day if a device is using both. Make the RX SKB a per-port variable and carry it over between invocations in the port struct instead. Zero the pointer once we call napi_gro_frags(), on error (after calling napi_free_frags()) or if the port is stopped. Zero it in some place where not strictly necessary just to emphasize what is going on. This was found by Sashiko during normal patch review.