CVE-2026-72501
Received Received - Intake

RDMA bnxt_re Variable Initialization Flaw in Linux Kernel

Vulnerability report for CVE-2026-72501, including description, CVSS score, EPSS score, affected products, exploitability, helpful resources, and attack-flow context.

Publication date: 2026-08-15

Last updated on: 2026-08-15

Assigner: kernel.org

Description

In the Linux kernel, the following vulnerability has been resolved: RDMA/bnxt_re: Initialize dpi variable to zero dpi is initialized only for BNXT_RE_ALLOC_WC_PAGE, but copied for all the cases. So initialize the dpi to 0.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-15
Last Modified
2026-08-15
Generated
2026-08-15
AI Q&A
2026-08-15
EPSS Evaluated
N/A
NVD
EUVD

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
linux linux_kernel *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This is a vulnerability in the Linux kernel related to the RDMA/bnxt_re driver. The issue involves an uninitialized variable named dpi. The dpi variable is only set to zero for a specific case (BNXT_RE_ALLOC_WC_PAGE) but is copied in all cases, which could lead to undefined behavior or potential security risks due to the use of uninitialized memory.

Detection Guidance

This vulnerability is specific to the Linux kernel's RDMA/bnxt_re driver. Detection requires checking if the affected driver is loaded and if the kernel version is vulnerable. Use commands like 'lsmod | grep bnxt_re' to check if the driver is loaded and 'uname -a' to verify the kernel version.

Impact Analysis

The impact of this vulnerability is primarily on systems running the Linux kernel with the affected RDMA/bnxt_re driver. It could lead to system instability, crashes, or unexpected behavior due to uninitialized memory usage. However, the exact impact depends on the specific configuration and usage of the affected driver.

Mitigation Strategies

Update the Linux kernel to a patched version that resolves this issue. If immediate patching is not possible, consider disabling the bnxt_re driver if it is not required on your system.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-72501. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart