CVE-2026-72497
HighCVSS 8.8Exploitation Probability (EPSS)
Low risk2th percentile - higher than 2% of all known CVEs
Summary
In the Linux kernel's RDMA bnxt_re driver, there is a missing max slot check for SQ. The WQE mode variable must be validated against the maximum slots supported by HW (max 64K). Added max and min checks to fail if user supplied value is more than max or zero.
Risk Assessment
Risk of improper SQ configuration could lead to driver crash or unpredictable behavior, potentially enabling an attack.
Recommendation
Apply the Linux kernel update containing the fix for CVE-2026-72497.
Original NVD description (English source)
In the Linux kernel, the following vulnerability has been resolved: RDMA/bnxt_re: Add a max slot check for SQ The variable WQE mode must be validated against the maximum slots supported by HW. The max supported value is 64K. Adding a max and min check and fail if user supplied value is more than the max supported and zero.