CVE-2026-97573

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the bnxt en driver where the bnxt rx ring reset() function fails to properly handle buffer allocation failures. Specifically, bnxt alloc one rx ring() can fail within bnxt alloc one tpa info data(), returning -ENOMEM and leaving subsequent rxr->rx tpa[] entries zeroed. Because this error is not propagated, the bnxt rx ring reset() loop continues and re-enables TPA (Trusted Packet Application) with a partially unallocated rx tpa array. Consequently, when the hardware agg id is mapped to a software index in rxr->rx tpa[], an uninitialized slot may be selected, resulting in a zero DMA address being provided to the device.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.