The bcmgenet_timeout handler in the Linux kernel's bcmgenet driver previously shut down all transmit queues when any single queue timed out, an over‑aggressive action that creates race conditions while other queues still operate. This flaw can lead to unexpected packet drops, degraded network performance, and intermittent loss of connectivity for the affected interface. The patch changes the behavior to restart only the timed‑out queue, reducing the risk of widespread disruption.

The vulnerability applies to any Linux kernel that includes the bcmgenet network driver before the patch was merged. The driver is used in stock kernels for certain Broadcom network devices. No exact version range is listed, so all kernels running the bcmgenet driver prior to the commit that adds the fix are considered at risk until updated.

The CVSS score is not supplied and EPSS data is unavailable, and the vulnerability is not listed in the CISA KEV catalog. No exploitation evidence or reports of remote or local use are documented. The weakness is an internal race condition that, while potentially causing service interruption, is unlikely to be leveraged for privilege escalation or remote code execution. Consequently, the risk is assessed as low to moderate; however, applying the patch is recommended to prevent possible network disruption.