CVE-2026-72499: RDMA/bnxt_re: Free CQ toggle page after firmware teardown
Published Aug 15, 2026
·Updated
In the Linux kernel, the following vulnerability has been resolved:
RDMA/bnxtre: Free CQ toggle page after firmware teardown
Free the toggle page only after firmware teardown completes so that an NQ interrupt arriving during bnxtqplibdestroycq() won't write the toggle value to an already-freed page. Move freepage() after bnxtqplibdestroycq.
Event History
Aug 15, 2026
CVE Published
via MITRE·05:57 AM
Data Sourced
via MITRE·05:57 AM
Description