CVE-2026-97570

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An out-of-bounds write issue exists in the bnxt en driver. The bnxt alloc agg idx function is designed to map firmware TPA IDs to software IDs used to index the rxr->rx tpa array. When the software ID exceeds the allocated size of the rx tpa array (defined by bp->max tpa), it leads to an invalid address being loaded and subsequent out-of-bounds writes. This can result in a kernel general protection fault and a system crash during boot, specifically when the bnxt rx pkt() function dereferences an out-of-bounds rx tpa entry.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.