CVE-2026-72117

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A data race exists in the bcm rx handler() function when an rx op is subscribed to all interfaces (ifindex == 0). Because the same op is registered in a shared per-netns wildcard filter list, the function can execute concurrently on different CPUs for frames arriving on different net devices. The variables rx stamp and rx ifindex were written before the bcm rx update lock was acquired, allowing concurrent writers to race. On 32-bit platforms, this can lead to a torn store of the 64-bit rx stamp. To ensure bcm send to user() reports the correct timestamp and interface index for the specific frame being delivered, the assignment must occur within the same bcm rx update lock section as the content comparison.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.