{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-64056", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "state": "PUBLISHED", "assignerShortName": "Linux", "dateReserved": "2026-07-19T07:54:57.030Z", "datePublished": "2026-07-19T15:39:37.673Z", "dateUpdated": "2026-07-20T13:42:53.741Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2026-07-20T13:42:53.741Z"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: ethernet: cortina: Make RX SKB per-port\n\nThe SKB used to assemble packets from fragments in gmac_rx()\nis static local, but the Gemini has two ethernet ports, meaning\nthere can be races between the ports on a bad day if a device\nis using both.\n\nMake the RX SKB a per-port variable and carry it over between\ninvocations in the port struct instead.\n\nZero the pointer once we call napi_gro_frags(), on error (after\ncalling napi_free_frags()) or if the port is stopped.\n\nZero it in some place where not strictly necessary just to\nemphasize what is going on.\n\nThis was found by Sashiko during normal patch review."}], "metrics": [{"cvssV3_1": {"version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "baseScore": 9.8, "baseSeverity": "CRITICAL"}}], "affected": [{"product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/net/ethernet/cortina/gemini.c"], "versions": [{"version": "4d5ae32f5e1e13f7f36d6439ec3257993b9f5b88", "lessThan": "27856d533eca3804008695f61c1e4d5ff984196b", "status": "affected", "versionType": "git"}, {"version": "4d5ae32f5e1e13f7f36d6439ec3257993b9f5b88", "lessThan": "b6b22824b30e48ce1df3a2e80990f4b8505deb50", "status": "affected", "versionType": "git"}, {"version": "4d5ae32f5e1e13f7f36d6439ec3257993b9f5b88", "lessThan": "6bba24e9ebe6f1c0b356cd471e36bdc7fa434897", "status": "affected", "versionType": "git"}, {"version": "4d5ae32f5e1e13f7f36d6439ec3257993b9f5b88", "lessThan": "3b249988d774dacf13b203817e971934a42243c4", "status": "affected", "versionType": "git"}, {"version": "4d5ae32f5e1e13f7f36d6439ec3257993b9f5b88", "lessThan": "72158ea185b27afae163949b0e86164cb6b64e55", "status": "affected", "versionType": "git"}, {"version": "4d5ae32f5e1e13f7f36d6439ec3257993b9f5b88", "lessThan": "cfd62907f3cdbc3b6da8f49ba907c0390018fe5e", "status": "affected", "versionType": "git"}, {"version": "4d5ae32f5e1e13f7f36d6439ec3257993b9f5b88", "lessThan": "67a35e7da7ef9d2f000aa758552a128324c604a0", "status": "affected", "versionType": "git"}, {"version": "4d5ae32f5e1e13f7f36d6439ec3257993b9f5b88", "lessThan": "06937db21ee311ed07eba47954447245041a982d", "status": "affected", "versionType": "git"}]}, {"product": "Linux", "vendor": "Linux", "defaultStatus": "affected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/net/ethernet/cortina/gemini.c"], "versions": [{"version": "4.16", "status": "affected"}, {"version": "0", "lessThan": "4.16", "status": "unaffected", "versionType": "semver"}, {"version": "5.10.258", "lessThanOrEqual": "5.10.*", "status": "unaffected", "versionType": "semver"}, {"version": "5.15.209", "lessThanOrEqual": "5.15.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.1.175", "lessThanOrEqual": "6.1.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.6.142", "lessThanOrEqual": "6.6.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.12.92", "lessThanOrEqual": "6.12.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.18.34", "lessThanOrEqual": "6.18.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.0.11", "lessThanOrEqual": "7.0.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.1", "lessThanOrEqual": "*", "status": "unaffected", "versionType": "original_commit_for_fix"}]}], "cpeApplicability": [{"nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "4.16", "versionEndExcluding": "5.10.258"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "4.16", "versionEndExcluding": "5.15.209"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "4.16", "versionEndExcluding": "6.1.175"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "4.16", "versionEndExcluding": "6.6.142"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "4.16", "versionEndExcluding": "6.12.92"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "4.16", "versionEndExcluding": "6.18.34"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "4.16", "versionEndExcluding": "7.0.11"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "4.16", "versionEndExcluding": "7.1"}]}]}], "references": [{"url": "https://git.kernel.org/stable/c/27856d533eca3804008695f61c1e4d5ff984196b"}, {"url": "https://git.kernel.org/stable/c/b6b22824b30e48ce1df3a2e80990f4b8505deb50"}, {"url": "https://git.kernel.org/stable/c/6bba24e9ebe6f1c0b356cd471e36bdc7fa434897"}, {"url": "https://git.kernel.org/stable/c/3b249988d774dacf13b203817e971934a42243c4"}, {"url": "https://git.kernel.org/stable/c/72158ea185b27afae163949b0e86164cb6b64e55"}, {"url": "https://git.kernel.org/stable/c/cfd62907f3cdbc3b6da8f49ba907c0390018fe5e"}, {"url": "https://git.kernel.org/stable/c/67a35e7da7ef9d2f000aa758552a128324c604a0"}, {"url": "https://git.kernel.org/stable/c/06937db21ee311ed07eba47954447245041a982d"}], "title": "net: ethernet: cortina: Make RX SKB per-port", "x_generator": {"engine": "bippy-1.2.0"}}}}

{}

{}

{"bugzilla": {"description": "kernel: net: ethernet: cortina: Make RX SKB per-port", "id": "2502594", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2502594"}, "csaw": false, "cwe": "CWE-820", "details": ["A flaw was found in the Linux kernel's Cortina ethernet driver for Gemini devices. The driver used a single, shared buffer (SKB, or Socket Kernel Buffer) for assembling incoming network packets across multiple ethernet ports. This shared resource could lead to race conditions, where simultaneous access from different ports might cause unpredictable system behavior, potentially resulting in a denial of service or data integrity issues."], "name": "CVE-2026-64056", "package_state": [{"cpe": "cpe:/o:redhat:enterprise_linux:10", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 10"}, {"cpe": "cpe:/o:redhat:enterprise_linux:6", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 6"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 9"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 9"}], "public_date": "2026-07-19T00:00:00Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2026-64056\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-64056\nhttps://lore.kernel.org/linux-cve-announce/2026071909-CVE-2026-64056-47cb@gregkh/T"]}

{}