CVE-2026-98356
Received Received - Intake

RDMA/bnxt_re DCB Setup Workqueue Null Pointer Dereference

Publication date: 2026-10-06

Last updated on: 2026-10-06

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: RDMA/bnxt_re: check create_singlethread_workqueue() in DCB setup bnxt_re_init_dcb_wq() ignores a failed allocation. The async DCB handler later calls queue_work() on the NULL pointer.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-06
Last Modified
2026-10-06
Generated
2026-10-06
AI Q&A
2026-10-06
EPSS Evaluated
N/A
NVD
CVE-2026-98356
EUVD
EUVD-2026-93341

Affected Vendors & Products

Showing 4 associated CPEs
Vendor Product Version / Range
Linux Linux 51dc5312dcd929efea7647c0c0e75afa461531b5
Linux Linux 51dc5312dcd929efea7647c0c0e75afa461531b5
Linux Linux 51dc5312dcd929efea7647c0c0e75afa461531b5
Linux Linux 6.14

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is in the Linux kernel's RDMA driver for Broadcom NetXtreme-C/E devices (bnxt_re). It occurs when the driver fails to check if a workqueue was successfully created during DCB (Data Center Bridging) setup. If the workqueue allocation fails, the driver later attempts to use this NULL pointer, leading to a potential system crash or undefined behavior.

Impact Analysis

If exploited, this vulnerability could cause a kernel panic or system instability on affected Linux systems using the bnxt_re driver. This may result in denial of service, data corruption, or unauthorized access depending on the attacker's capabilities and system configuration.

Mitigation Strategies

Update the Linux kernel to the latest patched version to resolve the RDMA/bnxt_re DCB setup issue where create_singlethread_workqueue() allocation failure is ignored.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-98356. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart