GHSA-2899-vqg2-g66rHighCVSS 8.8
In the Linux kernel, the following vulnerability has been resolved: RDMA/bnxt_re: Free CQ toggle...
🔗 CVE IDs covered (1)
📋 Description
In the Linux kernel, the following vulnerability has been resolved:
RDMA/bnxt_re: Free CQ toggle page after firmware teardown
Free the toggle page only after firmware teardown completes so that an NQ interrupt arriving during bnxt_qplib_destroy_cq() won't write the toggle value to an already-freed page. Move free_page() after bnxt_qplib_destroy_cq.
🔗 References (5)
- https://nvd.nist.gov/vuln/detail/CVE-2026-72499
- https://git.kernel.org/stable/c/b193854675ecad43b4d69c304c1b6a90b206cc99
- https://git.kernel.org/stable/c/bb45e06f9914ca64ac95341a80a0c20bb8dd46a9
- https://git.kernel.org/stable/c/33aed3ba04aa56eeeb876935896aa6530c46640e
- https://github.com/advisories/GHSA-2899-vqg2-g66r