Intel

CVE-2026-98304

Sicherheitsluecke -- CVE-2026-98304

criticalEPSS 0.2%

Description

In the Linux kernel, the following vulnerability has been resolved: net: bcmgenet: restore the hardware filters on open bcmgenet_hfb_init() runs INIT_LIST_HEAD() on priv->rxnfc_list, which drops every rule off the list, and bcmgenet_open() calls it on each ifup. Every rule the user configured is silently lost: # ethtool -N eth0 flow-type ether dst $MAC action 0 Added rule with ID 0 # ethtool -n eth0 | grep -c Filter: 1 # ip link set eth0 down && ip link set eth0 up # ethtool -n eth0 | grep -c Filter: 0 Initialise the lists once at probe and restore the rules on open, as bcmgenet_resume() already does.

Source: BSI CSAFBSI WID PortalMicrosoft Security Update Guidecvelistv5NVD (NIST)

Metrics

XIEM Effective CVSS
9.8
Source: cna-v3
EPSS percentile
6.2 %
Low — this CVE sits in the lower 10% of all CVEs scored today.
KEV status
—
Show all metrics
Severity
critical
Priority score
79.31
Exploit maturity
no public PoC known
CVSS v3
9.8
EPSS score
0.2 %
Low — model estimates < 1% exploitation likelihood.
Published
2026-10-06 08:46 UTC

References & sources

Reanalysis & status changes

Chronological NVD audit events for this CVE — reanalyses, CVSS updates, CPE diffs.

  1. New CVE Received2026-10-06 09:18 UTC· 416baaa9-dc9f-4396-8d5f-8c081fb06d67
    • Description: In the Linux kernel, the following vulnerability has been resolved: net: bcmgenet: restore the hardware filters on open bcmgenet_hfb_init() runs INIT_LIST_HEAD() on priv->rxnfc_list, which drops every rule off the list, and bcmgenet_open() calls it on each ifup. Every rule the user configured is silently lost: # ethtool -N eth0 flow-type ether dst $MAC action 0 Added rule with ID 0 # ethtool -n eth0 | grep -c Filter: 1 # ip link set eth0 down && ip link set eth0 up # ethtool -n eth0 | grep -c Filter: 0 Initialise the lists once at probe and restore the rules on open, as bcmgenet_resume() already does.
    • Affected: New affected value received. <a href="https://github.com/CVEProject/cvelistV5/blob/main/cves/2026/98xxx/CVE-2026-98304.json">CVE-2026-98304</a>
    • Reference: https://git.kernel.org/stable/c/23ca4ddc4fce2c233a49e9fd34d4b5b02bd7324e
    • Reference: https://git.kernel.org/stable/c/56db7ec462d6a2b886e299ad835109c089606969