CVE-2026-53177

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A NULL pointer dereference occurs during PCIe error recovery. When a Root Port or Downstream Port detects PCIe errors, recovery services run on all subordinate devices regardless of their administrative state. The callback function bnxt io error detected() triggers bnxt disable int sync(), which subsequently calls bnxt cp num to irq num() to map completion rings to IRQs using the bp->bnapi variable. Because bp->bnapi is allocated when the NIC is opened and freed when it is closed, the recovery process on a closed NIC can attempt to dereference a NULL pointer.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.