In the Linux kernel, the following vulnerability has been resolved:

bnxt_en: Fix NULL pointer dereference

PCIe errors detected by a Root Port or Downstream Port cause error
recovery services to run on all subordinate devices regardless of
administrative state.

The .error_detected() callback, bnxt_io_error_detected(), disables
and synchronizes IRQs via bnxt_disable_int_sync(), which calls
bnxt_cp_num_to_irq_num() to map completion rings to IRQs using
bp->bnapi.

Since bp->bnapi is allocated on NIC open and freed on NIC close, PCIe
error recovery on a closed NIC can dereference a NULL pointer.

Check if bp->bnapi is NULL before disabling and synchronizing IRQs.

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.00172.

Key SSVC decision points have not yet been added.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions
Linux Linux unaffected
Version Status Constraints
e5811b8c09df9bc80eabc95339fceded23f16289 affected < 964b1c3eb71afe58bb61c8b984164447e000ae8a
e5811b8c09df9bc80eabc95339fceded23f16289 affected < 59c5a3e69c7630a811565937e64be70b08436761
e5811b8c09df9bc80eabc95339fceded23f16289 affected < 1a418ad0e5e525d1d117dd1601681f75455af320
e5811b8c09df9bc80eabc95339fceded23f16289 affected < 08e57d014ea19f303d5d57a849beb846f37788b7
e5811b8c09df9bc80eabc95339fceded23f16289 affected < 3884976f87448e269908ae61bd5d62d54ce9c0c7
e5811b8c09df9bc80eabc95339fceded23f16289 affected < 580844a9683afe7974856dd5b7886447435b3474
e5811b8c09df9bc80eabc95339fceded23f16289 affected < d930276f2cddd0b7294cac7a8fe7b877f6d9e08d
Linux Linux affected
Version Status Constraints
4.17 affected —
0 unaffected < 4.17
5.15.210 unaffected ≤ 5.15.*
6.1.176 unaffected ≤ 6.1.*
6.6.143 unaffected ≤ 6.6.*
6.12.94 unaffected ≤ 6.12.*
6.18.36 unaffected ≤ 6.18.*
7.0.13 unaffected ≤ 7.0.*
7.1 unaffected ≤ *

No data.

No data.

OpenCVE Enrichment is a feature of OpenCVE that uses AI to automatically link vendors and products to CVEs. Learn more on GitHub.

No data.

Project Subscriptions

Vendors Products
Linux Subscribe
Linux Kernel Subscribe
Advisories

No advisories yet.

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References
Link Providers
https://git.kernel.org/stable/c/08e57d014ea19f303d5d57a849beb846f37788b7 cve-icon
https://git.kernel.org/stable/c/1a418ad0e5e525d1d117dd1601681f75455af320 cve-icon
https://git.kernel.org/stable/c/3884976f87448e269908ae61bd5d62d54ce9c0c7 cve-icon
https://git.kernel.org/stable/c/580844a9683afe7974856dd5b7886447435b3474 cve-icon
https://git.kernel.org/stable/c/59c5a3e69c7630a811565937e64be70b08436761 cve-icon
https://git.kernel.org/stable/c/964b1c3eb71afe58bb61c8b984164447e000ae8a cve-icon
https://git.kernel.org/stable/c/d930276f2cddd0b7294cac7a8fe7b877f6d9e08d cve-icon
History

Thu, 25 Jun 2026 11:30:00 +0000

Type Values Removed Values Added
Weaknesses CWE-476

Thu, 25 Jun 2026 09:15:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: bnxt_en: Fix NULL pointer dereference PCIe errors detected by a Root Port or Downstream Port cause error recovery services to run on all subordinate devices regardless of administrative state. The .error_detected() callback, bnxt_io_error_detected(), disables and synchronizes IRQs via bnxt_disable_int_sync(), which calls bnxt_cp_num_to_irq_num() to map completion rings to IRQs using bp->bnapi. Since bp->bnapi is allocated on NIC open and freed on NIC close, PCIe error recovery on a closed NIC can dereference a NULL pointer. Check if bp->bnapi is NULL before disabling and synchronizing IRQs.
Title bnxt_en: Fix NULL pointer dereference
First Time appeared Linux
Linux linux Kernel
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel
References

Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published:

Updated: 2026-06-25T08:38:53.347Z

Reserved: 2026-06-09T07:44:35.389Z

Link: CVE-2026-53177

cve-icon Vulnrichment

No data.

cve-icon NVD

No data.

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-06-25T11:15:10Z

Weaknesses