CVE-2026-53177

bnxt_en: Fix NULL pointer dereference

State: Published
Severity: Not scored
Published: Jun 25, 2026
Updated: Oct 15, 2026
Reserved: Jun 9, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

bnxt_en: Fix NULL pointer dereference

PCIe errors detected by a Root Port or Downstream Port cause error recovery services to run on all subordinate devices regardless of administrative state.

The .error_detected() callback, bnxt_io_error_detected(), disables and synchronizes IRQs via bnxt_disable_int_sync(), which calls bnxt_cp_num_to_irq_num() to map completion rings to IRQs using bp->bnapi.

Since bp->bnapi is allocated on NIC open and freed on NIC close, PCIe error recovery on a closed NIC can dereference a NULL pointer.

Check if bp->bnapi is NULL before disabling and synchronizing IRQs.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	e5811b8c09df9bc80eabc95339fceded23f16289 to before 1449177b87f768353909e930a99b902675119b2bAffected e5811b8c09df9bc80eabc95339fceded23f16289 to before 964b1c3eb71afe58bb61c8b984164447e000ae8aAffected e5811b8c09df9bc80eabc95339fceded23f16289 to before 59c5a3e69c7630a811565937e64be70b08436761Affected e5811b8c09df9bc80eabc95339fceded23f16289 to before 1a418ad0e5e525d1d117dd1601681f75455af320Affected e5811b8c09df9bc80eabc95339fceded23f16289 to before 08e57d014ea19f303d5d57a849beb846f37788b7Affected e5811b8c09df9bc80eabc95339fceded23f16289 to before 3884976f87448e269908ae61bd5d62d54ce9c0c7Affected e5811b8c09df9bc80eabc95339fceded23f16289 to before 580844a9683afe7974856dd5b7886447435b3474Affected e5811b8c09df9bc80eabc95339fceded23f16289 to before d930276f2cddd0b7294cac7a8fe7b877f6d9e08dAffected
LinuxLinux	4.17Affected before 4.17Not affected 5.10.260 through 5.10.Not affected 5.15.210 through 5.15.Not affected 6.1.176 through 6.1.Not affected 6.6.143 through 6.6.Not affected 6.12.94 through 6.12.Not affected 6.18.36 through 6.18.Not affected 7.0.13 through 7.0.*Not affected 7.1 and laterNot affected

Product

Versions

LinuxLinux

e5811b8c09df9bc80eabc95339fceded23f16289 to before 1449177b87f768353909e930a99b902675119b2bAffected
e5811b8c09df9bc80eabc95339fceded23f16289 to before 964b1c3eb71afe58bb61c8b984164447e000ae8aAffected
e5811b8c09df9bc80eabc95339fceded23f16289 to before 59c5a3e69c7630a811565937e64be70b08436761Affected
e5811b8c09df9bc80eabc95339fceded23f16289 to before 1a418ad0e5e525d1d117dd1601681f75455af320Affected
e5811b8c09df9bc80eabc95339fceded23f16289 to before 08e57d014ea19f303d5d57a849beb846f37788b7Affected
e5811b8c09df9bc80eabc95339fceded23f16289 to before 3884976f87448e269908ae61bd5d62d54ce9c0c7Affected
e5811b8c09df9bc80eabc95339fceded23f16289 to before 580844a9683afe7974856dd5b7886447435b3474Affected
e5811b8c09df9bc80eabc95339fceded23f16289 to before d930276f2cddd0b7294cac7a8fe7b877f6d9e08dAffected

LinuxLinux

4.17Affected
before 4.17Not affected
5.10.260 through 5.10.*Not affected
5.15.210 through 5.15.*Not affected
6.1.176 through 6.1.*Not affected
6.6.143 through 6.6.*Not affected
6.12.94 through 6.12.*Not affected
6.18.36 through 6.18.*Not affected
7.0.13 through 7.0.*Not affected
7.1 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.