CVE-2026-98304

CVE-2026-98304

published October 6, 2026

CVSS
—
EPSS
0%
Percentile
6.4
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

net: bcmgenet: restore the hardware filters on open

bcmgenet_hfb_init() runs INIT_LIST_HEAD() on priv->rxnfc_list, which drops

every rule off the list, and bcmgenet_open() calls it on each ifup. Every

rule the user configured is silently lost:

# ethtool -N eth0 flow-type ether dst $MAC action 0

Added rule with ID 0

# ethtool -n eth0 | grep -c Filter:

1

# ip link set eth0 down && ip link set eth0 up

# ethtool -n eth0 | grep -c Filter:

0

Initialise the lists once at probe and restore the rules on open, as

bcmgenet_resume() already does.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00173 · 6.4th percentile
Published
2026-10-06T13:18Z
References (3)
EPSS history
Timeline
  • 07 OCT 03:43Z
    EPSS moved — → 0%
    epss
  • 06 OCT 08:46Z
    net: bcmgenet: restore the hardware filters on open
    cvelistv5