CVE-2026-89582

In the Linux kernel, the following vulnerability has been resolved:

bnx2x: fix double free in bnx2x init firmware() error path

bnx2x init firmware() frees bp->init ops, bp->init data and bp->init ops offsets in its error path without setting them to NULL. The cleanup function bnx2x release firmware() frees the same three pointers unconditionally, so if init firmware fails and release firmware is later called (e.g. from bnx2x remove or through the function state machine), all three are freed a second time.

Set each pointer to NULL after kfree() in the error path so that the subsequent kfree(NULL) in bnx2x release firmware() is a safe no-op.