Unrated severityNVD Advisory· Published Jun 26, 2026
Debian linux: In the Linux kernel, the following vulnerability has been resolved: bnxt_en: Fi…
CVE-2026-53177
Description
In the Linux kernel, the following vulnerability has been resolved: bnxt_en: Fix NULL pointer dereference PCIe errors detected by a Root Port or Downstream Port cause error recovery services to run on all subordinate devices regardless of administrative state. The .error_detected() callback, bnxt_io_error_detected(), disables and synchronizes IRQs via bnxt_disable_int_sync(), which calls bnxt_cp_num_to_irq_num() to map completion rings to IRQs using bp->bnapi. Since bp->bnapi is allocated on NIC open and freed on NIC close, PCIe error recovery on a closed NIC can dereference a NULL pointer. Check if bp->bnapi is NULL before disabling and synchronizing IRQs.
Affected products
1Patches
Vulnerability mechanics
News mentions
0No linked articles in our index yet.