CVE-2026-53177
Description
In the Linux kernel, the following vulnerability has been resolved: bnxt_en: Fix NULL pointer dereference PCIe errors detected by a Root Port or Downstream Port cause error recovery services to run on all subordinate devices regardless of administrative state. The .error_detected() callback, bnxt_io_error_detected(), disables and synchronizes IRQs via bnxt_disable_int_sync(), which calls bnxt_cp_num_to_irq_num() to map completion rings to IRQs using bp->bnapi. Since bp->bnapi is allocated on NIC open and freed on NIC close, PCIe error recovery on a closed NIC can dereference a NULL pointer. Check if bp->bnapi is NULL before disabling and synchronizing IRQs.
How to fix
- linux linux_kernel5.15.210, 6.1.176, 6.6.143, 6.12.94, 6.18.36, 7.0.13 or later
- git.kernel.org/stable/c/08e57d014ea19f303d5d57a849beb846f37788b7
- git.kernel.org/stable/c/1449177b87f768353909e930a99b902675119b2b
- git.kernel.org/stable/c/1a418ad0e5e525d1d117dd1601681f75455af320
- git.kernel.org/stable/c/3884976f87448e269908ae61bd5d62d54ce9c0c7
- git.kernel.org/stable/c/580844a9683afe7974856dd5b7886447435b3474
- git.kernel.org/stable/c/59c5a3e69c7630a811565937e64be70b08436761
- git.kernel.org/stable/c/964b1c3eb71afe58bb61c8b984164447e000ae8a
- git.kernel.org/stable/c/d930276f2cddd0b7294cac7a8fe7b877f6d9e08d
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| linux linux_kernel | 4.17 ≤ v < 5.15.210, 5.16 ≤ v < 6.1.176, 6.2 ≤ v < 6.6.143, 6.7 ≤ v < 6.12.94, 6.13 ≤ v < 6.18.36, 6.19 ≤ v < 7.0.13, 7.1 | 5.15.210, 6.1.176, 6.6.143, 6.12.94, 6.18.36, 7.0.13 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.