https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 29 Sep 2026 06:31:48 +0000 https://vulnerability.circl.lu/vuln/cve-2026-64056 <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>net: ethernet: cortina: Make RX SKB per-port</p> <p>The SKB used to assemble packets from fragments in gmac_rx() is static local, but the Gemini has two ethernet ports, meaning there can be races between the ports on a bad day if a device is using both.</p> <p>Make the RX SKB a per-port variable and carry it over between invocations in the port struct instead.</p> <p>Zero the pointer once we call napi_gro_frags(), on error (after calling napi_free_frags()) or if the port is stopped.</p> <p>Zero it in some place where not strictly necessary just to emphasize what is going on.</p> <p>This was found by Sashiko during normal patch review.</p> <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>net: ethernet: cortina: Make RX SKB per-port</p> <p>The SKB used to assemble packets from fragments in gmac_rx() is static local, but the Gemini has two ethernet ports, meaning there can be races between the ports on a bad day if a device is using both.</p> <p>Make the RX SKB a per-port variable and carry it over between invocations in the port struct instead.</p> <p>Zero the pointer once we call napi_gro_frags(), on error (after calling napi_free_frags()) or if the port is stopped.</p> <p>Zero it in some place where not strictly necessary just to emphasize what is going on.</p> <p>This was found by Sashiko during normal patch review.</p> https://vulnerability.circl.lu/vuln/cve-2026-64056