In the Linux kernel, the following vulnerability has been resolved: net: systemport: Fix buffer overflow in bcm_sysport_get_stats() When running on… (CVE-2026-98808)

The Linux kernel contained a buffer overflow vulnerability in the bcm_sysport_get_stats() function related to SYSTEMPORT Lite. The function uses two indices: 'i' iterates over all statistics elements, and 'j' tracks the compacted index into the destination buffer. The buffer is sized according to bcm_sysport_get_sset_count(), but the code incorrectly writes data at data[i] instead of data[j], causing writes beyond the allocated buffer and resulting in memory corruption. The fix corrects the indexing to write at data[j].

Memory corruption due to buffer overflow can potentially lead to system instability or security issues such as privilege escalation or denial of service. However, no known exploits in the wild have been reported for this vulnerability.

A fix has been implemented in the Linux kernel to correct the buffer overflow by adjusting the indexing in bcm_sysport_get_stats(). Users should apply the official kernel update containing this fix when it becomes available. Patch status is not explicitly confirmed in the provided data; check the vendor advisory for current remediation guidance.