CVE-2026-53087 (CVSS 7.5)

Description

In the Linux kernel, the following vulnerability has been resolved: net: bcmgenet: fix leaking free_bds While reclaiming the tx queue we fast forward the write pointer to drop any data in flight. These dropped frames are not added back to the pool of free bds. We also need to tell the netdev that we are dropping said data.

Is your site exposed to CVE-2026-53087?

Run a free security scan — no signup, results in seconds.

CVSS v3.1 Score

7.5

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS — Exploit Prediction

0.0038

Probability of exploitation

0.30%

Percentile rank

EPSS estimates the probability that this vulnerability will be exploited in the wild within the next 30 days. A higher score means more likely to be exploited.

References

Other References

https://git.kernel.org/stable/c/150d06aae1839a6564ab200ef0e7291c3528bbb0 https://git.kernel.org/stable/c/25ff3a3e47ea635ec08dc93e84dd2bfe15abfebb https://git.kernel.org/stable/c/3c3abbcfa05bad17965498ff7cc94c2418fa94b3 https://git.kernel.org/stable/c/3f3168300efb839028328d720ab3962f91d6a0d0 https://git.kernel.org/stable/c/52b9f80993698138b90e5ca3a72550a2501f2a96 https://git.kernel.org/stable/c/ac4a29c331ecb5b10240c44247a8e010c95bc15b

Frequently Asked Questions

What is CVE-2026-53087? +

In the Linux kernel, the following vulnerability has been resolved: net: bcmgenet: fix leaking free_bds While reclaiming the tx queue we fast forward the write pointer to drop any data in flight. These dropped frames are not added back to the pool of free bds. We also need to tell the netdev that we are dropping said data. It has a CVSS v3.1 base score of 7.5 (HIGH).

How severe is CVE-2026-53087? +

CVE-2026-53087 has a CVSS v3.1 score of 7.5 out of 10, rated HIGH. This is a high-severity vulnerability that should be prioritized for patching. The EPSS score is 0.0038, placing it in the 0th percentile for exploitation probability.

How do I check if I'm vulnerable to CVE-2026-53087? +

You can use Secably's free Website Scanner to check your website for known vulnerabilities. For infrastructure scanning, use the Port Scanner to identify exposed services that may be affected. Check the vendor advisories linked above for specific patch and version information.

CVE-2026-53087