In the Linux kernel, the following vulnerability has been resolved:
bnxt_en: Handle buffer allocation failure in bnxt_rx_ring_reset()
bnxt_rx_ring_reset() frees the ring buffers and then reallocates them, ignoring the result.
bnxt_alloc_one_rx_ring() can fail in bnxt_alloc_one_tpa_info_data(), which returns -ENOMEM on the first failed allocation and leaves the remaining rxr->rx_tpa[] entries zeroed.
The error isn't propagated up, so the loop in bnxt_rx_ring_reset continues and at the end the code re-enables TPA with partially unallocated rx_tpa array.
This means that when the agg_id from hardware is mapped to a SW index in rxr->rx_tpa[], an uninitialized slot can be chosen which would hand a zero DMA address to the device.
Fix this by falling back to a global reset, which is what the existing code already does when other functions fail, but unlike the other failure cases this particular failure has to return because TPA can't be re-enabled since the allocation failed.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linuxUpgrade linux-6.12 | Sep 30, 2026 | Sep 25, 2026 |
| Redhat_linux | — | No solution exists | Sep 30, 2026 | Sep 25, 2026 |
| Ubuntu | — | Upgrade linux-aws-5.15Upgrade linux-azure-fdeUpgrade linux-gcpUpgrade linux-nvidia-tegraUpgrade linux-riscv-7.0Upgrade linux-lowlatencyUpgrade linux-riscv-5.15Upgrade linux-lowlatency-hwe-5.15Upgrade linux-nvidia-tegra-5.15Upgrade linux-awsUpgrade linux-gkeUpgrade linux-fipsUpgrade linux-ibm-5.15Upgrade linuxUpgrade linux-riscvUpgrade linux-oem-7.0Upgrade linux-bluefieldUpgrade linux-azure-fipsUpgrade linux-intel-iotgUpgrade linux-azureUpgrade linux-realtimeUpgrade linux-azure-fde-5.15Upgrade linux-gkeopUpgrade linux-nvidia-tegra-igxUpgrade linux-intel-iotg-5.15Upgrade linux-azure-5.15Upgrade linux-gcp-fipsUpgrade linux-gcp-5.15Upgrade linux-ibmUpgrade linux-oracle-5.15Upgrade linux-aws-fipsUpgrade linux-oracleUpgrade linux-hwe-5.15Upgrade linux-intel-iot-realtimeUpgrade linux-nvidiaUpgrade linux-hwe-7.0Upgrade linux-kvm | Nov 3, 2026 | Sep 25, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 13, 2026 | Sep 25, 2026 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub