In the Linux kernel, the following vulnerability has been resolved:
bnge: return after auxiliary_device_uninit() in error path
When auxiliary_device_add() fails, the error block calls auxiliary_device_uninit() but does not return. The uninit drops the last reference and synchronously runs bnge_aux_dev_release(), which sets bd->auxr_dev = NULL and frees the underlying object. The subsequent bd->auxr_dev->net = bd->netdev then dereferences NULL, which is not a good thing to have happen when trying to clean up from an error.
Add the missing return, as the auxiliary bus documentation states is a requirement (seems that LLM tools read documentation better than humans do...)
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Ubuntu | — | Upgrade linux-image-oem-24.04cUpgrade linux-image-raspi-realtime-7.0Upgrade linux-image-7.0.0-1007-oracleUpgrade linux-image-awsUpgrade linux-image-gcp-64k-7.0Upgrade linux-image-oracle-64kUpgrade linux-image-aws-7.0Upgrade linux-image-raspi-7.0Upgrade linux-image-7.0.0-1008-awsUpgrade linux-image-oem-24.04dUpgrade linux-image-generic-hwe-26.04Upgrade linux-image-realtime-64kUpgrade linux-image-realtimeUpgrade linux-image-realtime-64k-7.0Upgrade linux-image-virtualUpgrade linux-image-generic-7.0Upgrade linux-image-realtime-64k-hwe-26.04Upgrade linux-image-oem-24.04aUpgrade linux-image-azure-7.0Upgrade linux-image-gcpUpgrade linux-image-nvidia-64kUpgrade linux-image-7.0.0-27-genericUpgrade linux-image-oracleUpgrade linux-image-7.0.0-27-realtimeUpgrade linux-image-7.0.0-1014-raspi-realtimeUpgrade linux-image-7.0.0-28-genericUpgrade linux-image-aws-64kUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-virtual-7.0Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-oem-24.04Upgrade linux-image-7.0.0-27-realtime-64kUpgrade linux-image-gcp-64kUpgrade linux-image-7.0.0-1010-azureUpgrade linux-image-aws-64k-7.0Upgrade linux-image-7.0.0-28-generic-64kUpgrade linux-image-7.0.0-1007-gcpUpgrade linux-image-raspi-realtimeUpgrade linux-image-oracle-64k-7.0Upgrade linux-image-generic-64k-7.0Upgrade linux-image-7.0.0-1009-azure-fdeUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-7.0.0-1014-raspiUpgrade linux-image-azure-fde-7.0Upgrade linux-image-azure-fdeUpgrade linux-image-ibmUpgrade linux-image-ibm-7.0Upgrade linux-image-7.0.0-27-generic-64kUpgrade linux-image-oem-24.04bUpgrade linux-image-gcp-7.0Upgrade linux-image-7.0.0-1007-oracle-64kUpgrade linux-image-realtime-7.0Upgrade linux-image-generic-64k-hwe-26.04Upgrade linux-image-nvidia-64k-7.0Upgrade linux-image-generic-64kUpgrade linux-image-genericUpgrade linux-image-7.0.0-1009-ibmUpgrade linux-image-oracle-7.0Upgrade linux-image-virtual-hwe-26.04Upgrade linux-image-7.0.0-1013-nvidia-64kUpgrade linux-image-nvidiaUpgrade linux-image-7.0.0-1007-gcp-64kUpgrade linux-image-7.0.0-1013-nvidiaUpgrade linux-image-7.0.0-1008-aws-64kUpgrade linux-image-realtime-hwe-26.04Upgrade linux-image-raspiUpgrade linux-image-nvidia-7.0Upgrade linux-image-azure | Jul 1, 2026 | Apr 24, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub