CVE-2026-64125

*** Pendiente de traducción *** In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> net: bcmgenet: keep RBUF EEE/PM disabled<br /> <br /> Setting RBUF_EEE_EN | RBUF_PM_EN in RBUF_ENERGY_CTRL breaks the RX<br /> path on GENET hardware once MAC EEE becomes active. RX traffic stops<br /> flowing while the link stays up and the usual descriptor/RX error<br /> counters remain quiet. In that state the MAC still accepts frames<br /> (rbuf_ovflow_cnt keeps climbing) but RBUF no longer forwards them to<br /> DMA, so rx_packets is no longer incremented at the netdev level. On<br /> some boards the corruption ends up as a paging fault in<br /> skb_release_data via bcmgenet_rx_poll on an LPI exit.<br /> <br /> Reproduced on Pi 4B (BCM2711 + BCM54213PE) and confirmed by Florian<br /> Fainelli on an internal Broadcom 4908-family board with the same crash<br /> signature. RBUF_PM_EN is not publicly documented.<br /> <br /> This shows up more often now that phy_support_eee() enables EEE by<br /> default, but it also affects older kernels as soon as TX LPI is<br /> turned on via ethtool, so it is not specific to recent changes.<br /> <br /> Always clear RBUF_EEE_EN | RBUF_PM_EN in bcmgenet_eee_enable_set so<br /> the bits stay off across resets. UMAC and TBUF setup is left alone so<br /> TX-side EEE keeps working.