CVE-2026-97571

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the bnxt en driver where the bnxt queue mem alloc() function fails to propagate return values from bnxt alloc one tpa info data(). When bnxt alloc one tpa info data() returns -ENOMEM due to an allocation failure, the remaining entries in the rxr->rx tpa[] array remain zeroed. Because the return value is discarded, bnxt queue start() installs a partially initialized ring. Since the hardware selects the agg id and bnxt alloc agg idx maps it to a software index in rxr->rx tpa[], the device may be provided with a zero DMA (Direct Memory Access) address if an uninitialized slot is chosen.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.