CVE-2026-72500

Received Received - Intake

RDMA/bnxt_re Use-After-Free in SRQ Toggle Page

Publication date: 2026-08-15

Last updated on: 2026-08-17

Assigner: kernel.org

Description

In the Linux kernel, the following vulnerability has been resolved: RDMA/bnxt_re: Free SRQ toggle page after firmware teardown Free the toggle page only after firmware teardown completes so that an NQ interrupt arriving during bnxt_qplib_destroy_srq() won't write the toggle values to an already-freed page. Move free_page() after bnxt_qplib_destroy_srq().

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-15

Last Modified

2026-08-17

Generated

2026-09-04

AI Q&A

2026-08-15

EPSS Evaluated

2026-09-03

NVD

CVE-2026-72500

EUVD

EUVD-2026-59399

Affected Vendors & Products

Vendor	Product	Version / Range
linux	linux_kernel	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This is a Linux kernel vulnerability in the RDMA/bnxt_re driver. It involves a race condition where the toggle page is freed before firmware teardown completes. This could allow an NQ interrupt to write toggle values to a freed page during the bnxt_qplib_destroy_srq() function, potentially causing memory corruption or system instability.

Detection Guidance

This vulnerability is specific to the Linux kernel's RDMA/bnxt_re driver and involves a memory management issue during SRQ (Shared Receive Queue) teardown. Detection requires checking for kernel logs or errors related to bnxt_re driver crashes or memory corruption during SRQ operations.

Impact Analysis

If exploited, this vulnerability could lead to system crashes, memory corruption, or privilege escalation on affected Linux systems using the bnxt_re RDMA driver. It may allow attackers to execute arbitrary code or cause denial-of-service conditions.

Compliance Impact

This vulnerability does not directly affect compliance with GDPR, HIPAA, or other common standards and regulations. It is a low-level Linux kernel issue related to RDMA operations and memory management, with no documented impact on data protection or privacy requirements.

Mitigation Strategies

Update the Linux kernel to the latest patched version to resolve this vulnerability. Check your distribution's security advisories for kernel updates addressing CVE-2026-72500.

Hi! I’m here to help you understand CVE-2026-72500. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70