bnxt_en: Propagate RX ring init failures in bnxt_init_nic() (Linux Linux)

CVE-2026-97572
Non disponible

En bref

Source
NVD
EPSS
EPSS 0.22 % · centile 12 ()
État
PUBLISHED
Publiée
Mise à jour
Attribuée par
Linux
Statut NVD
Received

Description

In the Linux kernel, the following vulnerability has been resolved: bnxt_en: Propagate RX ring init failures in bnxt_init_nic() bnxt_init_rx_rings() returns an error when bnxt_alloc_one_rx_ring() fails, but bnxt_init_nic() discards that return value and calls bnxt_init_chip(), which enables TPA. If an allocation fails, this could leave rxr->rx_tpa[] partially zeroed and TPA would be enabled over an array with zeroed entries. This would lead to a zeroed DMA address being handed out if the agg_idx is translated to a SW index at a zeroed entry. Fix this by propagating the error out of bnxt_init_nic(). Both callers already check its return value and unwind with bnxt_free_skbs() and bnxt_free_mem(), which tolerate a partially initialized RX ring.

Références

Références européennes

Avis du CERT-FR

Produits affectés

ProduitVersions
Linux · Linuxaffected c0c050c58d840994ba842ad1c338a98e7c12b764 < e40641638743b4b848d5ed78a0565afffc359d8e ; affected c0c050c58d840994ba842ad1c338a98e7c12b764 < 6b24eca42619b93f69aebc2aa0a9fd28ac9a5085 ; affected c0c050c58d840994ba842ad1c338a98e7c12b764 < 1f2d333ae2e1a73b7cc1c2a627587024cd147c01 ; affected c0c050c58d840994ba842ad1c338a98e7c12b764 < c3eb07e78e628243cbb9bbb0115db802fb7a303f ; affected c0c050c58d840994ba842ad1c338a98e7c12b764 < daadccd062fdca5e77a8cc22ffe35857803b6c49 ; affected c0c050c58d840994ba842ad1c338a98e7c12b764 < b4c40f2c80d7bf50648878bc206a39adfbfaec6c
Linux · Linuxaffected 4.4 ; unaffected 0 < 4.4 ; unaffected 5.10.271 ≤ 5.10.* ; unaffected 5.15.222 ≤ 5.15.* ; unaffected 6.1.189 ≤ 6.1.* ; unaffected 6.6.158 ≤ 6.6.*

Sources

SourceLicence
CVE List (CVEProject cvelistV5)CVE Program Terms of Use
EPSS (FIRST.org)FIRST — attribution requested
ENISA EUVDENISA — reproduction authorised, source acknowledged
CERT-FR (ANSSI)Licence Ouverte / Etalab 2.0
NVD (NIST) via fkie-cad/nvd-json-data-feedsPublic domain — this product uses data from the NVD API but is not endorsed or certified by the NVD