CVE-2026-72499

High

Description

In the Linux kernel, the following vulnerability has been resolved: RDMA/bnxt_re: Free CQ toggle page after firmware teardown Free the toggle page only after firmware teardown completes so that an NQ interrupt arriving during bnxt_qplib_destroy_cq() won't write the toggle value to an already-freed page. Move free_page() after bnxt_qplib_destroy_cq.

SeverityHigh
CVSS8.8
Exploit probability—
ProductLinux
PublishedAug 15, 2026
First seenAug 15, 2026

How to fix

Update
  • Linux Linux8a8d69a01bda1fec9b07b5559be2b6ed45b1e974, 33aed3ba04aa56eeeb876935896aa6530c46640e, b193854675ecad43b4d69c304c1b6a90b206cc99, bb45e06f9914ca64ac95341a80a0c20bb8dd46a9 or later

Affected products

ProductAffected versionsFixed in
Linux Linuxe275919d96693c5ca964b20d73a33d52a7e57f04 ≤ v < 8a8d69a01bda1fec9b07b5559be2b6ed45b1e974, e275919d96693c5ca964b20d73a33d52a7e57f04 ≤ v < 33aed3ba04aa56eeeb876935896aa6530c46640e, e275919d96693c5ca964b20d73a33d52a7e57f04 ≤ v < b193854675ecad43b4d69c304c1b6a90b206cc99, e275919d96693c5ca964b20d73a33d52a7e57f04 ≤ v < bb45e06f9914ca64ac95341a80a0c20bb8dd46a9, 6.88a8d69a01bda1fec9b07b5559be2b6ed45b1e974, 33aed3ba04aa56eeeb876935896aa6530c46640e, b193854675ecad43b4d69c304c1b6a90b206cc99, bb45e06f9914ca64ac95341a80a0c20bb8dd46a9

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.