Linux Kernel CVE-2026-53088

Vendor-released patch: update to a fixed stable kernel - 5.10.258, 5.15.209, 6.1.175, 6.6.141, 6.12.91, 6.18.33, 7.0.10, or mainline 7.1 (or later on your branch), pulling the corresponding distribution kernel update once your vendor ships it. The fix is a small driver correction (rewind the write_ptr before returning the tx_cb) available as the kernel.org stable commits listed under https://git.kernel.org/stable/c/. Because the defect lives entirely in the bcmgenet driver, a targeted compensating control if you cannot reboot into a patched kernel is to avoid relying on the GENET interface for trusted traffic or, on devices with an alternative NIC (USB Ethernet/Wi‑Fi), bring the GENET interface down and route through the alternate interface - the trade-off is loss of the onboard wired port and its throughput. For appliances/IoT (e.g., Raspberry Pi fleets) where the bug primarily risks driver crashes, schedule the kernel upgrade through normal maintenance windows; given low EPSS and no known exploitation, an emergency out-of-band patch is not warranted. Verify exact fix versions against your distribution advisory rather than the NVD severity.