CVE-2026-72500

Source
https://cve.org/CVERecord?id=CVE-2026-72500
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-72500.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-72500
Downstream
BELL (1)
DEBIAN (1)
openSUSE (1)
SUSE (6)
UBUNTU (1)
Related
Published
2026-08-15T05:57:32Z
Modified
2026-10-28T02:30:50Z
Severity
  • 8.8 (High) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H CVSS Calculator
Summary
RDMA/bnxt_re: Free SRQ toggle page after firmware teardown
Details

In the Linux kernel, the following vulnerability has been resolved:

RDMA/bnxt_re: Free SRQ toggle page after firmware teardown

Free the toggle page only after firmware teardown completes so that an NQ interrupt arriving during bnxt_qplib_destroy_srq() won't write the toggle values to an already-freed page. Move free_page() after bnxt_qplib_destroy_srq().

Database specific
{
    "cna_assigner":  "Linux",
    "osv_generated_from":  "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/72xxx/CVE-2026-72500.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
181028a0d84cdcc7ac86d05cc49eaa416ce85c8b
Fixed
3b6ecad5b9b0f7230ed725aafaf8c4ed9327a9bf
Fixed
104a7ff382a58a83cae018925e3574c784e8274c
Fixed
0adcd67f3d6f84835be682da0153f57f5c2f8036
Fixed
131e2918b9b0529687e67e2e58047304027f095a

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-72500.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
6.12.0
Fixed
6.12.114
Type
ECOSYSTEM
Events
Introduced
6.13.0
Fixed
6.18.40
Type
ECOSYSTEM
Events
Introduced
6.19.0
Fixed
7.1.5

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-72500.json"