In the Linux kernel, the following vulnerability has been resolved:
bnxt_en: Fix RSS context delete logic
We need to free the corresponding RSS context VNIC in FW everytime an RSS context is deleted in driver. Commit 667ac333dbb7 added a check to delete the VNIC in FW only when netif_running() is true to help delete RSS contexts with interface down.
Having that condition will make the driver leak VNICs in FW whenever close() happens with active RSS contexts. On the subsequent open(), as part of RSS context restoration, we will end up trying to create extra VNICs for which we did not make any reservation. FW can fail this request, thereby making us lose active RSS contexts.
Suppose an RSS context is deleted already and we try to process a delete request again, then the HWRM functions will check for validity of the request and they simply return if the resource is already freed. So, even for delete-when-down cases, netif_running() check is not necessary.
Remove the netif_running() condition check when deleting an RSS context.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade python3-perfUpgrade kernel-rt-64k-modules-extraUpgrade kernel-64k-develUpgrade kernel-debugUpgrade kernel-debug-develUpgrade kernel-debug-coreUpgrade kernel-headersUpgrade kernel-64k-coreUpgrade kernel-debug-uki-virtUpgrade kernel-zfcpdump-develUpgrade kernel-rt-64k-modules-coreUpgrade kernel-rt-64k-coreUpgrade kernel-rt-debug-develUpgrade kernel-rt-64k-modulesUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-devel-matchedUpgrade kernel-debug-modules-coreUpgrade kernel-rt-64k-debug-modules-coreUpgrade kernel-64k-debug-coreUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-debug-devel-matchedUpgrade kernel-rt-64k-debugUpgrade kernel-rt-64k-debug-modulesUpgrade kernel-modules-coreUpgrade rtlaUpgrade kernel-64kUpgrade kernel-modulesUpgrade kernel-tools-libsUpgrade kernel-64k-modules-coreUpgrade kernel-rt-64k-debug-modules-extraUpgrade kernel-abi-stablelistsUpgrade kernel-rt-debug-coreUpgrade kernelUpgrade kernel-64k-devel-matchedUpgrade kernel-rt-debug-modulesUpgrade libperfUpgrade kernel-64k-modulesUpgrade kernel-rt-modules-extraUpgrade kernel-coreUpgrade kernel-64k-debug-modules-extraUpgrade kernel-rt-coreUpgrade kernel-debug-modulesUpgrade kernel-modules-extraUpgrade kernel-cross-headersUpgrade kernel-rt-64kUpgrade kernel-rt-debugUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-64k-debugUpgrade kernel-debug-modules-extraUpgrade kernel-develUpgrade kernel-64k-debug-develUpgrade kernel-rt-64k-develUpgrade kernel-zfcpdump-coreUpgrade kernel-uki-virt-addonsUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-64k-debug-modulesUpgrade perfUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-develUpgrade kernel-toolsUpgrade kernel-rt-64k-debug-develUpgrade kernel-rt-modules-coreUpgrade kernel-zfcpdump-modulesUpgrade kernel-rt-modulesUpgrade kernel-64k-debug-modules-coreUpgrade kernel-rt-64k-debug-coreUpgrade rvUpgrade kernel-tools-libs-develUpgrade kernel-docUpgrade kernel-rt-debug-modules-coreUpgrade kernel-64k-modules-extraUpgrade kernel-zfcpdumpUpgrade kernel-rtUpgrade kernel-uki-virt | Jun 24, 2026 | Jun 22, 2026 |
| Debian | — | Upgrade linux | Jul 23, 2026 | Jul 23, 2026 |
| Redhat_linux | — | Upgrade kernelNo solution existsUpgrade kernel-rt | Jun 22, 2026 | May 6, 2026 |
| Rocky_linux | — | Upgrade kernel-develUpgrade kernel-rt-debugUpgrade kernel-rt-debuginfoUpgrade kernel-modules-extra-matchedUpgrade kernel-rt-debug-debuginfoUpgrade kernel-tools-libs-develUpgrade kernel-rtUpgrade kernel-zfcpdump-coreUpgrade kernel-rt-modules-extraUpgrade kernel-toolsUpgrade python3-perf-debuginfoUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-modulesUpgrade kernel-tools-libsUpgrade kernel-rt-develUpgrade rvUpgrade kernel-debug-uki-virtUpgrade kernel-uki-virt-addonsUpgrade kernel-zfcpdumpUpgrade perfUpgrade python3-perfUpgrade kernel-rt-debug-coreUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-rt-debug-modules-coreUpgrade libperf-debuginfoUpgrade kernel-debuginfo-common-s390xUpgrade kernel-rt-modules-coreUpgrade kernel-debugUpgrade kernel-debug-develUpgrade rtlaUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-rt-debug-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debug-modulesUpgrade kernel-modules-coreUpgrade kernel-devel-matchedUpgrade kernel-debug-coreUpgrade kernel-uki-virtUpgrade kernel-zfcpdump-develUpgrade libperfUpgrade kernelUpgrade kernel-zfcpdump-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-debug-debuginfoUpgrade kernel-debug-modules-coreUpgrade kernel-rt-coreUpgrade kernel-modules-extraUpgrade kernel-rt-debug-modulesUpgrade kernel-zfcpdump-modulesUpgrade kernel-coreUpgrade kernel-debuginfoUpgrade kernel-debug-devel-matchedUpgrade kernel-modulesUpgrade perf-debuginfoUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-debug-modules-extra | Jun 24, 2026 | Jun 22, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub