CVE-2026-72500

High

Description

In the Linux kernel, the following vulnerability has been resolved: RDMA/bnxt_re: Free SRQ toggle page after firmware teardown Free the toggle page only after firmware teardown completes so that an NQ interrupt arriving during bnxt_qplib_destroy_srq() won't write the toggle values to an already-freed page. Move free_page() after bnxt_qplib_destroy_srq().

SeverityHigh
CVSS8.8
Exploit probability—
ProductLinux
PublishedAug 15, 2026
First seenAug 15, 2026

How to fix

Update
  • Linux Linux3b6ecad5b9b0f7230ed725aafaf8c4ed9327a9bf, 104a7ff382a58a83cae018925e3574c784e8274c, 0adcd67f3d6f84835be682da0153f57f5c2f8036, 131e2918b9b0529687e67e2e58047304027f095a or later

Affected products

ProductAffected versionsFixed in
Linux Linux181028a0d84cdcc7ac86d05cc49eaa416ce85c8b ≤ v < 3b6ecad5b9b0f7230ed725aafaf8c4ed9327a9bf, 181028a0d84cdcc7ac86d05cc49eaa416ce85c8b ≤ v < 104a7ff382a58a83cae018925e3574c784e8274c, 181028a0d84cdcc7ac86d05cc49eaa416ce85c8b ≤ v < 0adcd67f3d6f84835be682da0153f57f5c2f8036, 181028a0d84cdcc7ac86d05cc49eaa416ce85c8b ≤ v < 131e2918b9b0529687e67e2e58047304027f095a, 6.123b6ecad5b9b0f7230ed725aafaf8c4ed9327a9bf, 104a7ff382a58a83cae018925e3574c784e8274c, 0adcd67f3d6f84835be682da0153f57f5c2f8036, 131e2918b9b0529687e67e2e58047304027f095a

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.