In the Linux kernel, the following vulnerability has been resolved:
RDMA/bnxt_re: Free SRQ toggle page after firmware teardown
Free the toggle page only after firmware teardown completes so that an NQ interrupt arriving during bnxtqplibdestroysrq() won't write the toggle values to an already-freed page. Move freepage() after bnxtqplibdestroy_srq().
{
"osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/72xxx/CVE-2026-72500.json",
"cna_assigner": "Linux"
}