CVE-2026-53215

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the mvpp2 network driver where the RX error path returns the current descriptor buffer to the hardware Buffer Manager (BM) pool. This action is only valid while the driver maintains ownership of the buffer. If the mvpp2 rx refill() function fails after the buffer has been passed to XDP (eXpress Data Path) or attached to an skb (socket buffer), the buffer may have already been recycled, redirected, or queued. Returning such a buffer to the BM pool allows the hardware to perform Direct Memory Access (DMA) into memory that is no longer owned by the RX ring.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.