{"id":"CVE-2026-97572","summary":"bnxt_en: Propagate RX ring init failures in bnxt_init_nic()","details":"In the Linux kernel, the following vulnerability has been resolved:\n\nbnxt_en: Propagate RX ring init failures in bnxt_init_nic()\n\nbnxt_init_rx_rings() returns an error when bnxt_alloc_one_rx_ring()\nfails, but bnxt_init_nic() discards that return value and calls\nbnxt_init_chip(), which enables TPA.\n\nIf an allocation fails, this could leave rxr-\u003erx_tpa[] partially zeroed\nand TPA would be enabled over an array with zeroed entries. This would\nlead to a zeroed DMA address being handed out if the agg_idx is\ntranslated to a SW index at a zeroed entry.\n\nFix this by propagating the error out of bnxt_init_nic(). Both callers\nalready check its return value and unwind with bnxt_free_skbs() and\nbnxt_free_mem(), which tolerate a partially initialized RX ring.","modified":"2026-10-09T17:26:58.288695675Z","published":"2026-09-25T10:21:56.826Z","related":["openSUSE-SU-2026:12074-1"],"database_specific":{"cna_assigner":"Linux","osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97572.json"},"references":[{"type":"WEB","url":"https://git.kernel.org/stable/c/1f2d333ae2e1a73b7cc1c2a627587024cd147c01"},{"type":"WEB","url":"https://git.kernel.org/stable/c/6b24eca42619b93f69aebc2aa0a9fd28ac9a5085"},{"type":"WEB","url":"https://git.kernel.org/stable/c/8e6a850c0746bb4be167aedf1ee57469fcda09a9"},{"type":"WEB","url":"https://git.kernel.org/stable/c/b4c40f2c80d7bf50648878bc206a39adfbfaec6c"},{"type":"WEB","url":"https://git.kernel.org/stable/c/c3eb07e78e628243cbb9bbb0115db802fb7a303f"},{"type":"WEB","url":"https://git.kernel.org/stable/c/daadccd062fdca5e77a8cc22ffe35857803b6c49"},{"type":"WEB","url":"https://git.kernel.org/stable/c/dfd73af81cdb9f7b399754a59e2658a08211bee5"},{"type":"WEB","url":"https://git.kernel.org/stable/c/e40641638743b4b848d5ed78a0565afffc359d8e"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97572.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-97572"},{"type":"PACKAGE","url":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","events":[{"introduced":"c0c050c58d840994ba842ad1c338a98e7c12b764"},{"fixed":"e40641638743b4b848d5ed78a0565afffc359d8e"},{"fixed":"6b24eca42619b93f69aebc2aa0a9fd28ac9a5085"},{"fixed":"1f2d333ae2e1a73b7cc1c2a627587024cd147c01"},{"fixed":"c3eb07e78e628243cbb9bbb0115db802fb7a303f"},{"fixed":"daadccd062fdca5e77a8cc22ffe35857803b6c49"},{"fixed":"b4c40f2c80d7bf50648878bc206a39adfbfaec6c"},{"fixed":"dfd73af81cdb9f7b399754a59e2658a08211bee5"},{"fixed":"8e6a850c0746bb4be167aedf1ee57469fcda09a9"}]}],"database_specific":{"source":"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2026-97572.json"}},{"package":{"name":"Kernel","ecosystem":"Linux"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.4.0"},{"fixed":"5.10.271"}]},{"type":"ECOSYSTEM","events":[{"introduced":"5.11.0"},{"fixed":"5.15.222"}]},{"type":"ECOSYSTEM","events":[{"introduced":"5.16.0"},{"fixed":"6.1.189"}]},{"type":"ECOSYSTEM","events":[{"introduced":"6.2.0"},{"fixed":"6.6.158"}]},{"type":"ECOSYSTEM","events":[{"introduced":"6.7.0"},{"fixed":"6.12.111"}]},{"type":"ECOSYSTEM","events":[{"introduced":"6.13.0"},{"fixed":"6.18.53"}]},{"type":"ECOSYSTEM","events":[{"introduced":"6.19.0"},{"fixed":"7.2.7"}]}],"database_specific":{"source":"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2026-97572.json"}}],"schema_version":"1.9.0"}