CVE-2026-98808

In the Linux kernel, the following vulnerability has been resolved:

net: systemport: Fix buffer overflow in bcm sysport get stats()

When running on SYSTEMPORT Lite, certain statistics are unsupported and skipped during bcm sysport get stats(). The variable 'j' tracks the compacted index into the destination data buffer, whereas 'i' iterates over all elements in bcm sysport gstrings stats.

Because the buffer allocated by ethtool is sized only according to bcm sysport get sset count(), storing values at data[i] instead of data[j] writes past the allocated array bounds, leading to memory corruption.

Fix this by writing to data[j] instead of data[i].