PT-2025-54113 · Broadcom+1 · Broadcom Bcm4908 Enet+1

Published 2025-12-30 · Updated 2025-12-30 · CVE-2022-50877

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A flaw exists in the Linux kernel’s Broadcom bcm4908 enet driver related to updating transmission (TX) statistics. The issue arises because queuing packets does not guarantee their transmission, and TX stats were updated before hardware confirmation of data consumption. This could lead to a race condition and a NULL dereference within the bcm4908 enet start xmit() function when attempting to access a socket buffer (skb) after it has been freed in bcm4908 enet poll tx().

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2022-50877

Affected Products

Broadcom Bcm4908 Enet

Linux Kernel

References · 14

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/50xxx/CVE-2022-50877.json · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2022-50877 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-50877 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-50877 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2022-50877 · Security Note
• https://osv.dev/vulnerability/CVE-2022-50877 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-50877 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2022-50877 · Vendor Advisory
• https://git.kernel.org/linus/ef3556ee16c68735ec69bd08df41d1cd83b14ad3 · Note
• https://twitter.com/CVEnew/status/2005993824364159284 · Twitter Post
• https://git.kernel.org/stable/c/c9589e18a60c55c76772a38117ef9a16b942e56b · Note
• https://git.kernel.org/stable/c/2adedc80faec243ede55355e57142110d6f46e08 · Note
• https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git · Note
• https://git.kernel.org/stable/c/ef3556ee16c68735ec69bd08df41d1cd83b14ad3 · Note