CVE-2026-89582

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A double free issue exists in the bnx2x driver. The function bnx2x init firmware() frees the pointers bp->init ops, bp->init data, and bp->init ops offsets during an error path without setting them to NULL. Because the cleanup function bnx2x release firmware() frees these same pointers unconditionally, a second free operation occurs if bnx2x init firmware() fails and bnx2x release firmware() is subsequently called via bnx2x remove or the function state machine.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.