CVE-2026-89582
Description
In the Linux kernel, the following vulnerability has been resolved: bnx2x: fix double free in bnx2x_init_firmware() error path bnx2x_init_firmware() frees bp->init_ops, bp->init_data and bp->init_ops_offsets in its error path without setting them to NULL. The cleanup function bnx2x_release_firmware() frees the same three pointers unconditionally, so if init_firmware fails and release_firmware is later called (e.g. from __bnx2x_remove or through the function state machine), all three are freed a second time. Set each pointer to NULL after kfree() in the error path so that the subsequent kfree(NULL) in bnx2x_release_firmware() is a safe no-op.
How to fix
- Linux Linux770715784b689749014ce193ef986b706fe8f51c, c44e5d6c3189241d5f791bc7b1eddde6b92f802c, 07d4516e3eb1fcde4a5db29eb556cdb0ebba6265, ac280f6872e75df49f3004505bcddff91d9e5362, dc98e727b9cfc5e19c796bf893878153f00b222b, 4d36e38e48340a1ccf92a98c7a22d07a954e5aa3, a142c024f07d623e2b6b25943f6c36d4b6b0b4c6, d2796ffe38cb4155afe0eab23636295b096c27a5 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | 94a78b79cb5f14c09a42522738d6694c6a1cdd20 ≤ v < 770715784b689749014ce193ef986b706fe8f51c, 94a78b79cb5f14c09a42522738d6694c6a1cdd20 ≤ v < c44e5d6c3189241d5f791bc7b1eddde6b92f802c, 94a78b79cb5f14c09a42522738d6694c6a1cdd20 ≤ v < 07d4516e3eb1fcde4a5db29eb556cdb0ebba6265, 94a78b79cb5f14c09a42522738d6694c6a1cdd20 ≤ v < ac280f6872e75df49f3004505bcddff91d9e5362, 94a78b79cb5f14c09a42522738d6694c6a1cdd20 ≤ v < dc98e727b9cfc5e19c796bf893878153f00b222b, 94a78b79cb5f14c09a42522738d6694c6a1cdd20 ≤ v < 4d36e38e48340a1ccf92a98c7a22d07a954e5aa3, 94a78b79cb5f14c09a42522738d6694c6a1cdd20 ≤ v < a142c024f07d623e2b6b25943f6c36d4b6b0b4c6, 94a78b79cb5f14c09a42522738d6694c6a1cdd20 ≤ v < d2796ffe38cb4155afe0eab23636295b096c27a5, 2.6.31 | 770715784b689749014ce193ef986b706fe8f51c, c44e5d6c3189241d5f791bc7b1eddde6b92f802c, 07d4516e3eb1fcde4a5db29eb556cdb0ebba6265, ac280f6872e75df49f3004505bcddff91d9e5362, dc98e727b9cfc5e19c796bf893878153f00b222b, 4d36e38e48340a1ccf92a98c7a22d07a954e5aa3, a142c024f07d623e2b6b25943f6c36d4b6b0b4c6, d2796ffe38cb4155afe0eab23636295b096c27a5 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.