CVE-2026-43034: bnxt_en: set backing store type from query type
In the Linux kernel, the following vulnerability has been resolved:
bnxten: set backing store type from query type
bnxthwrmfuncbackingstoreqcapsv2() stores resp->type from the firmware response in ctxm->type and later uses that value to index fixed backing-store metadata arrays such as ctxarr[] and bnxtbstoretotrace[].
ctxm->type is fixed by the current backing-store query type and matches the array index of ctx->ctxarr. Set ctxm->type from the current loop variable instead of depending on resp->type.
Also update the loop to advance type from nextvalidtype in the for statement, which keeps the control flow simpler for non-valid and unchanged entries.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2026-43034?
CVE-2026-43034 has been classified with a medium severity level due to its potential impact on system stability.
How do I fix CVE-2026-43034?
To fix CVE-2026-43034, you should update to the latest version of the Linux kernel that includes the security patch.
What systems are impacted by CVE-2026-43034?
CVE-2026-43034 affects the Linux kernel, specifically the functionality related to backing store types.
What is the nature of the vulnerability in CVE-2026-43034?
CVE-2026-43034 involves improper handling of backing store types from firmware responses in the bnxt_en driver.
Is there any workaround for CVE-2026-43034?
There are currently no widely recommended workarounds for CVE-2026-43034, so upgrading the kernel is the best course of action.