Live › vulnerability › CVE-2026-98808
Go to dashboardOn Broadcom SYSTEMPORT Lite network adapters, the driver writes statistics to the wrong index when some counters are skipped, overrunning the buffer ethtool allocated. The memory corruption could crash the kernel or be leveraged further, though the sources do not say.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Systems running the Linux kernel with the Broadcom SYSTEMPORT or SYSTEMPORT Lite network driver, typically certain Broadcom set-top box and SoC platforms. Systems without this hardware driver can skip it. The sources do not say which kernel versions are affected.
No product ranges from the sources yet.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
In the Linux kernel, the following vulnerability has been resolved:
net: systemport: Fix buffer overflow in bcm_sysport_get_stats()
When running on SYSTEMPORT Lite, certain statistics are unsupported and skipped during bcm_sysport_get_stats(). The variable 'j' tracks the compacted index into the destination data buffer, whereas 'i' iterates over all elements in bcm_sysport_gstrings_stats.
Because the buffer allocated by ethtool is sized only according to bcm_sysport_get_sset_count(), storing values at data[i] instead of data[j] writes past the allocated array bounds, leading to memory corruption.
Fix this by writing to data[j] instead of data[i].
This page as .md · .json · in your agent: get_signal("CVE-2026-98808")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.