CVE-2026-72495
Received Received - Intake

RDMA/bnxt_re Kernel Memory Allocation Race Condition

Publication date: 2026-08-15

Last updated on: 2026-08-15

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: RDMA/bnxt_re: Avoid repeated requests to allocate WC pages Applications can request multiple WC pages for the same ucontext. As of now, only 1 WC page per ucontext is supported. Add a lock to avoid concurrent access and a check to fail repeated requests. Also, if the mmap entry insert fails for the WC, free the Doorbell page index mapped for the WC page.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-15
Last Modified
2026-08-15
Generated
2026-08-15
AI Q&A
2026-08-15
EPSS Evaluated
N/A
NVD
CVE-2026-72495
EUVD
EUVD-2026-59394

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
linux linux_kernel *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability in the Linux kernel involves a race condition in the RDMA/bnxt_re driver where applications can repeatedly request write-combining (WC) pages for the same user context. The kernel currently supports only one WC page per user context, but without proper synchronization, concurrent requests could lead to issues. The fix adds a lock to prevent concurrent access and a check to reject repeated requests. If mapping the WC page fails, the doorbell page index is freed to avoid resource leaks.

Detection Guidance

This vulnerability is specific to the Linux kernel's RDMA/bnxt_re driver and involves improper handling of WC page allocation requests. Detection would require checking kernel logs for errors related to RDMA/bnxt_re operations or WC page allocation failures.

Impact Analysis

This vulnerability may cause system instability or crashes if an application repeatedly requests WC pages, leading to resource exhaustion or corruption. It could also result in denial-of-service conditions if the kernel fails to handle concurrent requests properly. Systems using RDMA/bnxt_re for high-performance networking may experience performance degradation or unexpected failures.

Mitigation Strategies

Update the Linux kernel to the latest patched version to resolve the issue. Monitor RDMA/bnxt_re driver logs for repeated WC page allocation requests and ensure only one WC page per ucontext is used.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-72495. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart