CVE-2026-53086CWE-362

CVE-2026-53086

Critical · published June 24, 2026

CVSS v3.1
9.8
EPSS
0%
Percentile
22.0
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

net: bcmgenet: fix racing timeout handler

The bcmgenet_timeout handler tries to take down all tx queues when

a single queue times out. This is over zealous and causes many race

conditions with queues that are still chugging along. Instead lets

only restart the timed out queue.

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00304 · 22.0th percentile
Weakness
CWE-362 · Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
Published
2026-06-24T21:17Z
Affected products (5)
ProductVersionsFixed in
linux/linux_kernel≥ 4.2, < 6.1.1756.1.175
linux/linux_kernel≥ 6.2, < 6.6.1416.6.141
linux/linux_kernel≥ 6.7, < 6.12.916.12.91
linux/linux_kernel≥ 6.13, < 6.18.336.18.33
linux/linux_kernel≥ 6.19, < 7.0.107.0.10
References (6)
EPSS history
Timeline
  • 24 JUN 16:30Z
    net: bcmgenet: fix racing timeout handler
    cvelistv5