In the Linux kernel, the following vulnerability has been resolved:
bnxt_en: Fix RSS context delete logic
We need to free the corresponding RSS context VNIC in FW everytime an RSS context is deleted in driver. Commit 667ac333dbb7 added a check to delete the VNIC in FW only when netif_running() is true to help delete RSS contexts with interface down.
Having that condition will make the driver leak VNICs in FW whenever close() happens with active RSS contexts. On the subsequent open(), as part of RSS context restoration, we will end up trying to create extra VNICs for which we did not make any reservation. FW can fail this request, thereby making us lose active RSS contexts.
Suppose an RSS context is deleted already and we try to process a delete request again, then the HWRM functions will check for validity of the request and they simply return if the resource is already freed. So, even for delete-when-down cases, netif_running() check is not necessary.
Remove the netif_running() condition check when deleting an RSS context.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-rt-modules-coreUpgrade kernel-zfcpdump-modulesUpgrade kernel-64k-debug-modulesUpgrade kernel-rt-debugUpgrade kernel-64k-debug-develUpgrade kernel-rt-modulesUpgrade kernel-64k-debug-modules-coreUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-develUpgrade kernel-zfcpdumpUpgrade kernel-toolsUpgrade kernel-rtUpgrade kernel-tools-libs-develUpgrade kernel-docUpgrade kernel-64k-debugUpgrade kernel-uki-virtUpgrade kernel-debug-modules-extraUpgrade kernel-rt-64k-develUpgrade rvUpgrade kernel-rt-debug-modules-coreUpgrade kernel-develUpgrade kernel-64k-modules-extraUpgrade kernel-zfcpdump-coreUpgrade kernel-rt-64k-debug-develUpgrade kernel-uki-virt-addonsUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-rt-64k-debug-coreUpgrade kernel-rt-64kUpgrade kernel-64k-debug-devel-matchedUpgrade perfUpgrade kernel-rt-64k-debug-modules-extraUpgrade kernel-rt-64k-debug-modulesUpgrade kernel-debug-modulesUpgrade rtlaUpgrade kernel-rt-modules-extraUpgrade kernel-rt-debug-coreUpgrade kernel-rt-coreUpgrade kernel-abi-stablelistsUpgrade kernel-rt-debug-modulesUpgrade kernel-modules-coreUpgrade kernel-cross-headersUpgrade libperfUpgrade kernel-64k-devel-matchedUpgrade kernel-headersUpgrade kernel-rt-64k-modules-coreUpgrade kernel-debug-coreUpgrade kernel-64kUpgrade kernel-debugUpgrade kernel-64k-develUpgrade kernel-debug-uki-virtUpgrade kernelUpgrade kernel-debug-devel-matchedUpgrade kernel-64k-debug-coreUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-debug-develUpgrade kernel-64k-coreUpgrade kernel-rt-64k-modules-extraUpgrade kernel-zfcpdump-develUpgrade kernel-modulesUpgrade kernel-tools-libsUpgrade kernel-rt-64k-debugUpgrade kernel-64k-debug-modules-extraUpgrade kernel-coreUpgrade kernel-64k-modulesUpgrade python3-perfUpgrade kernel-modules-extraUpgrade kernel-rt-debug-develUpgrade kernel-rt-64k-modulesUpgrade kernel-rt-64k-debug-modules-coreUpgrade kernel-debug-modules-coreUpgrade kernel-64k-modules-coreUpgrade kernel-rt-64k-coreUpgrade kernel-devel-matchedUpgrade kernel-zfcpdump-modules-extra | Jun 24, 2026 | Jun 22, 2026 |
| Debian | — | Upgrade linux | Jul 23, 2026 | Jul 23, 2026 |
| Redhat_linux | — | No solution existsUpgrade kernel-rtUpgrade kernel | Jun 22, 2026 | May 6, 2026 |
| Rocky_linux | — | Upgrade kernel-zfcpdump-modulesUpgrade kernel-debuginfoUpgrade kernel-modulesUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-debug-modules-extraUpgrade kernel-rt-debug-modulesUpgrade kernel-uki-virtUpgrade kernel-rt-coreUpgrade kernel-modules-extraUpgrade kernel-devel-matchedUpgrade kernel-zfcpdump-develUpgrade kernel-debugUpgrade libperfUpgrade perf-debuginfoUpgrade kernel-modules-coreUpgrade kernel-debug-debuginfoUpgrade kernel-debug-modules-coreUpgrade kernel-debug-develUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-zfcpdump-modules-coreUpgrade rtlaUpgrade kernel-zfcpdump-debuginfoUpgrade kernel-debug-devel-matchedUpgrade kernel-coreUpgrade kernel-rt-debug-develUpgrade kernelUpgrade kernel-debug-modulesUpgrade kernel-debug-coreUpgrade kernel-uki-virt-addonsUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-modules-extraUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-tools-libs-develUpgrade kernel-rt-modulesUpgrade kernel-rt-debug-debuginfoUpgrade python3-perf-debuginfoUpgrade kernel-rtUpgrade kernel-modules-extra-matchedUpgrade kernel-rt-debugUpgrade kernel-rt-debuginfoUpgrade kernel-rt-develUpgrade kernel-debug-uki-virtUpgrade kernel-develUpgrade rvUpgrade kernel-debuginfo-common-s390xUpgrade libperf-debuginfoUpgrade perfUpgrade kernel-zfcpdumpUpgrade kernel-rt-debug-modules-coreUpgrade kernel-zfcpdump-coreUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernel-rt-debug-coreUpgrade kernel-rt-modules-coreUpgrade python3-perf | Jun 24, 2026 | Jun 22, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub