CVE-2026-64056: In the Linux kernel, the following vulnerability has been resolved: net: ethernet: cortina: Make RX SKB per-port The S
Summary
A race condition (a bug where two processes access shared data simultaneously, causing unpredictable behavior) was found in the Linux kernel's Cortina ethernet driver when a device has two ethernet ports. The problem occurs because the SKB (socket buffer, a data structure that holds network packet information) used to reassemble fragmented packets was stored as a static local variable, meaning both ports could interfere with each other. The fix moves the SKB to be stored separately for each port instead of shared between them.
Solution / Mitigation
Make the RX SKB a per-port variable by carrying it over between invocations in the port struct instead of using a static local variable. Zero the pointer after calling napi_gro_frags(), on error (after calling napi_free_frags()), or if the port is stopped.
Vulnerability Details
EPSS: 0.0%
July 19, 2026
Classification
Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-64056
First tracked: July 19, 2026 at 02:09 PM
Classified by LLM (prompt v3) · confidence: 95%