CVE-2026-72497: RDMA/bnxt_re: Add a max slot check for SQ
In the Linux kernel, the following vulnerability has been resolved:
RDMA/bnxtre: Add a max slot check for SQ
The variable WQE mode must be validated against the maximum slots supported by HW. The max supported value is 64K. Adding a max and min check and fail if user supplied value is more than the max supported and zero.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Compensating control
In the Linux kernel RDMA/bnxt_re SQ handling, validate the variable WQE mode and fail when the supplied value is zero or exceeds the hardware maximum of 64K slots.
Event History
Frequently Asked Questions
What is the severity of CVE-2026-72497?
CVE-2026-72497 has a risk score of 27, indicating a significant security vulnerability.
How do I fix CVE-2026-72497?
To fix CVE-2026-72497, ensure that you are using an updated version of the Linux kernel that includes the patches for this vulnerability.
What type of vulnerability is CVE-2026-72497?
CVE-2026-72497 is a kernel vulnerability related to improper validation of user-supplied values in the RDMA/bnxt_re driver.
What is the impact of CVE-2026-72497?
The impact of CVE-2026-72497 can lead to potential application crashes or unintended behavior due to improper handling of WQE mode settings.
When was CVE-2026-72497 published?
CVE-2026-72497 was published on August 15, 2026.