CVE-2026-68375

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the bnxt en driver where the bnxt aux devices init() function calls auxiliary device init() before all fields required by bnxt aux dev release() are initialized. If an allocation failure occurs after auxiliary device init() succeeds, the subsequent error handling invokes auxiliary device uninit(), which triggers the release callback. Because the release callback expects aux priv->id, aux priv->edev, edev->net, and edev->ulp tbl to be populated, it may dereference or clear partially initialized state.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.