8.8

CVE-2026-72500

RDMA/bnxt_re: Free SRQ toggle page after firmware teardown

In the Linux kernel, the following vulnerability has been resolved:

RDMA/bnxt_re: Free SRQ toggle page after firmware teardown

Free the toggle page only after firmware teardown completes so that
an NQ interrupt arriving during bnxt_qplib_destroy_srq() won't write
the toggle values to an already-freed page. Move free_page() after
bnxt_qplib_destroy_srq().
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
Produkt Linux
Default Statusunaffected
Version 181028a0d84cdcc7ac86d05cc49eaa416ce85c8b
Version < 104a7ff382a58a83cae018925e3574c784e8274c
Status affected
Version 181028a0d84cdcc7ac86d05cc49eaa416ce85c8b
Version < 0adcd67f3d6f84835be682da0153f57f5c2f8036
Status affected
Version 181028a0d84cdcc7ac86d05cc49eaa416ce85c8b
Version < 131e2918b9b0529687e67e2e58047304027f095a
Status affected
HerstellerLinux
Produkt Linux
Default Statusaffected
Version 6.12
Status affected
Version 0
Version < 6.12
Status unaffected
Version <= 6.18.*
Version 6.18.40
Status unaffected
Version <= 7.1.*
Version 7.1.5
Status unaffected
Version <= *
Version 7.2
Status unaffected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.16% 0.058
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
416baaa9-dc9f-4396-8d5f-8c081fb06d67 8.8 2 6
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://git.kernel.org/stable/c/104a7ff382a58a83cae018925e3574c784e8274c
https://git.kernel.org/stable/c/0adcd67f3d6f84835be682da0153f57f5c2f8036
https://git.kernel.org/stable/c/131e2918b9b0529687e67e2e58047304027f095a