Baitaphish
Security intelligence
SearchLatest briefing
CVE Explorer

CVE-2026-53217

In the Linux kernel, the following vulnerability has been resolved: net: mvpp2: sync RX data at the hardware packet offset mvpp2 programs the RX queue packet offset, so hardware writes received data at dma_addr + MVPP2_SKB_HEADROOM. The current CPU sync starts at dma_addr and only covers rx_bytes + MVPP2_MH_SIZE bytes, which syncs the unused headroom and misses the same number of bytes at the packet tail. On non-coherent DMA systems this can leave the CPU reading stale cache contents for the
Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:d233a6cf5941a955a73dc12df556131d77e9cf71524e4973f721b4cc5e14c1a4
Known exploited
Not asserted
Disputed
No
Stale source
No
Conflicts
1

Preserved source conflicts

No provider value was silently selected as the winner.

affected · 2 assertions

{"defaultStatus":"affected","product":"Linux","programFiles":["drivers/net/ethernet/marvell/mvpp2/mvpp2_main.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"5.5"},{"lessThan":"5.5","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.10.*","status":"unaffected","version":"5.10.259","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.210","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.176","versionT…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:b34d4812e6fe8cba155671f5a5affd5b5a24827626c33005c5c2c6e06db8ed09 · sha256:e2adc89850e2a19d… · /containers/cna/affected/1

{"defaultStatus":"unaffected","product":"Linux","programFiles":["drivers/net/ethernet/marvell/mvpp2/mvpp2_main.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"60412bdd1b2576659eac23a23d2d9ff96228a643","status":"affected","version":"e1921168bbd4810de4197446e52f652cd0dd9541","versionType":"git"},{"lessThan":"19f8bc139e9b149d1e5bf75ae761d1bb8dd3e7d8","status":"affected","version":"e1921168bbd4810de4197446e52f652cd0dd9541","versionType":"git"},{"lessThan":"a3ad9b5767c89531fc7dae951b51b0933dcf7051","status":"affected","version"…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:b34d4812e6fe8cba155671f5a5affd5b5a24827626c33005c5c2c6e06db8ed09 · sha256:e2adc89850e2a19d… · /containers/cna/affected/0

Affected products and versions

2 source assertions
{"defaultStatus":"affected","product":"Linux","programFiles":["drivers/net/ethernet/marvell/mvpp2/mvpp2_main.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"5.5"},{"lessThan":"5.5","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.10.*","status":"unaffected","version":"5.10.259","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.210","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.176","versionT…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:b34d4812e6fe8cba155671f5a5affd5b5a24827626c33005c5c2c6e06db8ed09 · sha256:e2adc89850e2a19d… · /containers/cna/affected/1
{"defaultStatus":"unaffected","product":"Linux","programFiles":["drivers/net/ethernet/marvell/mvpp2/mvpp2_main.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"60412bdd1b2576659eac23a23d2d9ff96228a643","status":"affected","version":"e1921168bbd4810de4197446e52f652cd0dd9541","versionType":"git"},{"lessThan":"19f8bc139e9b149d1e5bf75ae761d1bb8dd3e7d8","status":"affected","version":"e1921168bbd4810de4197446e52f652cd0dd9541","versionType":"git"},{"lessThan":"a3ad9b5767c89531fc7dae951b51b0933dcf7051","status":"affected","version"…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:b34d4812e6fe8cba155671f5a5affd5b5a24827626c33005c5c2c6e06db8ed09 · sha256:e2adc89850e2a19d… · /containers/cna/affected/0

Provider-owned CVSS observations

1 source assertion
{"metric":{"baseScore":8.6,"baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L","version":"3.1"},"metric_type":"cvssV3_1"}
  • cve_program_cvelist_v5cvss
    urn:baitaphish:normalized-source-record:v2:b34d4812e6fe8cba155671f5a5affd5b5a24827626c33005c5c2c6e06db8ed09 · sha256:e2adc89850e2a19d… · /containers/cna/metrics/0/cvssV3_1

Source references

8 source assertions
{"url":"https://git.kernel.org/stable/c/180235600934bef6add3be637c296d6cf3272e67"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:b34d4812e6fe8cba155671f5a5affd5b5a24827626c33005c5c2c6e06db8ed09 · sha256:e2adc89850e2a19d… · /containers/cna/references/7
{"url":"https://git.kernel.org/stable/c/19f8bc139e9b149d1e5bf75ae761d1bb8dd3e7d8"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:b34d4812e6fe8cba155671f5a5affd5b5a24827626c33005c5c2c6e06db8ed09 · sha256:e2adc89850e2a19d… · /containers/cna/references/1
{"url":"https://git.kernel.org/stable/c/23548007b3c66d628fc7d6b80d1e23be04ea10d9"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:b34d4812e6fe8cba155671f5a5affd5b5a24827626c33005c5c2c6e06db8ed09 · sha256:e2adc89850e2a19d… · /containers/cna/references/4
{"url":"https://git.kernel.org/stable/c/60412bdd1b2576659eac23a23d2d9ff96228a643"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:b34d4812e6fe8cba155671f5a5affd5b5a24827626c33005c5c2c6e06db8ed09 · sha256:e2adc89850e2a19d… · /containers/cna/references/0
{"url":"https://git.kernel.org/stable/c/a13199fa224e9f776f4005d5037df03aa9ea8f37"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:b34d4812e6fe8cba155671f5a5affd5b5a24827626c33005c5c2c6e06db8ed09 · sha256:e2adc89850e2a19d… · /containers/cna/references/5
{"url":"https://git.kernel.org/stable/c/a3ad9b5767c89531fc7dae951b51b0933dcf7051"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:b34d4812e6fe8cba155671f5a5affd5b5a24827626c33005c5c2c6e06db8ed09 · sha256:e2adc89850e2a19d… · /containers/cna/references/2
{"url":"https://git.kernel.org/stable/c/bede0f481b9137d73d1cf64309cbe4b94818a5d6"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:b34d4812e6fe8cba155671f5a5affd5b5a24827626c33005c5c2c6e06db8ed09 · sha256:e2adc89850e2a19d… · /containers/cna/references/3
{"url":"https://git.kernel.org/stable/c/e302206ad84a407a7e5f3f6fe767ff5efaace689"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:b34d4812e6fe8cba155671f5a5affd5b5a24827626c33005c5c2c6e06db8ed09 · sha256:e2adc89850e2a19d… · /containers/cna/references/6

Attribution and limitations

  • CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer