You are using an out of date browser. It may not display this or other websites correctly. You should upgrade or use an alternative browser.
stmmac driver
About this tag
The stmmac driver is a Linux kernel Ethernet driver commonly used on embedded and system-on-chip hardware. Recent discussions on WindowsForum highlight several CVEs affecting this driver, including CVE-2026-45940 (GMAC4 split-header oops), CVE-2026-31649 (jumbo-frame integer underflow), CVE-2025-38126 (PTP division by zero), CVE-2025-40337 (RX checksum offload fix), and CVE-2025-38125 (EST division by zero). These vulnerabilities can cause kernel crashes, memory safety issues, or reliability problems. While Windows itself is not affected, Linux-powered network appliances, development boards, industrial gateways, NAS devices, and mixed Windows/Linux environments may require attention. The tag covers kernel reliability and security implications of the stmmac driver.
CVE-2026-45940 is a Linux kernel networking flaw published by NVD on May 27, 2026, after kernel.org reported a resolved crash in the stmmac Ethernet driver when GMAC4 split-header receive handling miscalculates packet buffer length. The bug is not yet scored by NVD, but its shape is already...
CVE-2026-31649 is a newly published Linux kernel vulnerability that turns a small arithmetic mistake in the stmmac Ethernet driver into a potentially serious memory-safety problem on embedded and system-on-chip hardware. The flaw sits in the driver’s jumbo-frame transmit path, where a mismatch...
The Linux kernel vulnerability tracked as CVE-2025-38126 is a narrow but important robustness bug in the STMMAC Ethernet driver: under certain board or device-tree configurations the driver can end up with a zero PTP clock rate (ptp_rate / clk_ptp_rate), and that zero value may be used during...
The Linux kernel received a targeted fix for a subtle but consequential networking error: CVE-2025-40337 corrects how the stmmac Ethernet driver handles Rx checksum offload results so that packets for which the hardware reported checksum failures are no longer marked as valid and passed up the...
The Linux kernel fix tracked as CVE-2025-38125 corrects a simple but dangerous logic error in the STMMAC Ethernet driver: if the driver’s recorded ptp_rate is zero, that bogus value can be propagated into the EST configuration and cause a division‑by‑zero. Microsoft’s public advisory names Azure...