CVE-2026-97574
priority · track · 0EPSS 0.002 · 9 %ileDEFREPSS · scored 2026-10-22
In the Linux kernel, the following vulnerability has been resolved: bnxt_en: Don't free the live ring's TPA state on queue restart failure bnxt_queue_mem_alloc() shallow copies the live RX ring into the clone: memcpy(clone, rxr, sizeof(*rxr)); the code currently clears pointers that the clone owns (such as rx_agg_bmap), but rx_tpa and rx_tpa_idx_map are left pointing at memory of the live ring that was cloned. If an allocation failure happens later and the err_free_tpa_info label is taken, the live ring's memory can be freed while still in use. Fix this by initializing the clone's pointers to NULL to prevent live ring state from being freed inadvertently.
cvss
Technical severity, 0–10. One row per scoring source.
No CVSS score recorded.
weaknesses
The CWE weakness classes this flaw belongs to.
affected products (8)
Products and version ranges known to be affected.
advisories (4)
Vendor and ecosystem advisories describing this.
- WID-SEC-W-2026-3579Linux Kernel: Mehrere SchwachstellenDeutsch2026-09-24csaf · cert_bundDE
Ein lokaler Angreifer kann mehrere Schwachstellen im Linux Kernel ausnutzen, um einen Denial of Service Zustand herbeizuführen oder nicht näher spezifizierten Angriff durchzuführen.
- CERTFR-2026-AVI-1372Multiples vulnérabilités dans les produits SUSEFrançais2026-10-23vendor · certfrFR
- CERTFR-2026-AVI-1374Multiples vulnérabilités dans le noyau Linux de DebianFrançais2026-10-23vendor · certfrFR
- CERTFR-2026-AVI-1375Multiples vulnérabilités dans le noyau Linux de Debian LTSFrançais2026-10-23vendor · certfrFR
sources
Which sources assert this record, and when.
references (4) nvd
External citations — patches, advisories, analysis.
Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.
Free scan