CVE-2026-72499
8.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Summary
In the Linux kernel, the following vulnerability has been resolved:
RDMA/bnxt_re: Free CQ toggle page after firmware teardown
Free the toggle page only after firmware teardown completes so that an NQ interrupt arriving during bnxt_qplib_destroy_cq() won't write the toggle value to an already-freed page. Move free_page() after bnxt_qplib_destroy_cq.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Linux | Linux | e275919d96693c5ca964b20d73a33d52a7e57f04 < b193854675ecad43b4d69c304c1b6a90b206cc99 | affected |
| Linux | Linux | e275919d96693c5ca964b20d73a33d52a7e57f04 < bb45e06f9914ca64ac95341a80a0c20bb8dd46a9 | affected |
| Linux | Linux | 6.8 | affected |
| Linux | Linux | 0 < 6.8 | unaffected |
| Linux | Linux | 7.1.5 <= 7.1.* | unaffected |
| Linux | Linux | 7.2 <= * | unaffected |
Weaknesses
References
- https://git.kernel.org/stable/c/b193854675ecad43b4d69c304c1b6a90b206cc99
- https://git.kernel.org/stable/c/bb45e06f9914ca64ac95341a80a0c20bb8dd46a9
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.