In the Linux kernel, the following vulnerability has been resolved: net: ethernet: cortina: Make RX SKB per-port The SKB used to assemble packets… (CVE-2026-64056)
In the Linux kernel, the following vulnerability has been resolved: net: ethernet: cortina: Make RX SKB per-port The SKB used to assemble packets from fragments in gmac_rx() is static local, but the Gemini has two ethernet ports, meaning there can be races between the ports on a bad day if a device is using both. Make the RX SKB a per-port variable and carry it over between invocations in the port struct instead. Zero the pointer once we call napi_gro_frags(), on error (after calling napi_free_frags()) or if the port is stopped. Zero it in some place where not strictly necessary just to emphasize what is going on. This was found by Sashiko during normal patch review.
AI Analysis
Technical Summary
The Linux kernel vulnerability CVE-2026-64056 affected the ethernet cortina driver, where the RX SKB used in gmac_rx() was a static local variable. Since the Gemini platform has two ethernet ports, this static usage could cause race conditions if both ports were active simultaneously, potentially leading to packet assembly errors. The patch changes the RX SKB to be per-port, stored in the port structure, and ensures the pointer is zeroed after processing or on errors to avoid stale references. This fix eliminates the race condition by isolating SKB usage per port.
Potential Impact
The vulnerability could cause race conditions during packet assembly on systems using the Gemini platform with two ethernet ports. This may lead to packet corruption or instability in network communication. However, no known exploits in the wild have been reported.
Mitigation Recommendations
A fix has been implemented in the Linux kernel to address this issue by making the RX SKB per-port and zeroing pointers appropriately. Users should update to the latest Linux kernel versions that include this patch. No additional mitigation steps are indicated.
In the Linux kernel, the following vulnerability has been resolved: net: ethernet: cortina: Make RX SKB per-port The SKB used to assemble packets… (CVE-2026-64056)
Description
In the Linux kernel, the following vulnerability has been resolved: net: ethernet: cortina: Make RX SKB per-port The SKB used to assemble packets from fragments in gmac_rx() is static local, but the Gemini has two ethernet ports, meaning there can be races between the ports on a bad day if a device is using both. Make the RX SKB a per-port variable and carry it over between invocations in the port struct instead. Zero the pointer once we call napi_gro_frags(), on error (after calling napi_free_frags()) or if the port is stopped. Zero it in some place where not strictly necessary just to emphasize what is going on. This was found by Sashiko during normal patch review.
CVSS v3.1
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
The Linux kernel vulnerability CVE-2026-64056 affected the ethernet cortina driver, where the RX SKB used in gmac_rx() was a static local variable. Since the Gemini platform has two ethernet ports, this static usage could cause race conditions if both ports were active simultaneously, potentially leading to packet assembly errors. The patch changes the RX SKB to be per-port, stored in the port structure, and ensures the pointer is zeroed after processing or on errors to avoid stale references. This fix eliminates the race condition by isolating SKB usage per port.
Potential Impact
The vulnerability could cause race conditions during packet assembly on systems using the Gemini platform with two ethernet ports. This may lead to packet corruption or instability in network communication. However, no known exploits in the wild have been reported.
Mitigation Recommendations
A fix has been implemented in the Linux kernel to address this issue by making the RX SKB per-port and zeroing pointers appropriately. Users should update to the latest Linux kernel versions that include this patch. No additional mitigation steps are indicated.
Technical Details
- Gcve Source
- db.gcve.eu
- Osv Id
- GHSA-h3jw-23r7-cv6p
- Osv Schema Version
- 1.4.0
- Aliases
- ["CVE-2026-64056"]
- Ecosystems
- []
- Database Specific Severity
- null
- Cvss Version
- null
Threat ID: 6a5d27a92a4a8d598912cbaa
Added to database: 07/19/2026, 19:38:17 UTC
Last enriched: 07/19/2026, 19:55:13 UTC
Last updated: 07/20/2026, 20:28:36 UTC
Views: 15
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.