NXP ENET QoS Ethernet Driver Vulnerability in Transmission Handling

CVE-2026-90590

What is CVE-2026-90590?

A flaw in the NXP ENET QoS Ethernet driver affects the transmission process, leading to a denial-of-service condition. This vulnerability occurs when a link-down/link-up transition happens while a frame is in the transmit DMA, preventing the frame from being written back and resulting in persistent transmission failures. Affected systems will continue to receive packets but become unable to transmit, leading to significant disruptions in network operations. The vulnerability can be exploited without requiring user credentials or interaction, allowing an attacker who controls the link partner to create this condition. The issue persists until the device is reset, as impacted packets are not properly reclaimed, and the interface remains inoperable. A fix has been released, implementing a mechanism to handle outstanding packets more effectively and to prevent such states from occurring.

References