CVE-2026-72500

Source
https://cve.org/CVERecord?id=CVE-2026-72500
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-72500.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-72500
Downstream
Published
2026-08-15T05:57:32.341Z
Modified
2026-08-16T03:48:43.564375199Z
Summary
RDMA/bnxt_re: Free SRQ toggle page after firmware teardown
Details

In the Linux kernel, the following vulnerability has been resolved:

RDMA/bnxt_re: Free SRQ toggle page after firmware teardown

Free the toggle page only after firmware teardown completes so that an NQ interrupt arriving during bnxtqplibdestroysrq() won't write the toggle values to an already-freed page. Move freepage() after bnxtqplibdestroy_srq().

Database specific
{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/72xxx/CVE-2026-72500.json",
    "cna_assigner": "Linux"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
181028a0d84cdcc7ac86d05cc49eaa416ce85c8b
Fixed
104a7ff382a58a83cae018925e3574c784e8274c
Fixed
0adcd67f3d6f84835be682da0153f57f5c2f8036
Fixed
131e2918b9b0529687e67e2e58047304027f095a

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-72500.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
6.12.0
Fixed
6.18.40
Type
ECOSYSTEM
Events
Introduced
6.19.0
Fixed
7.1.5

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-72500.json"