PT-2026-52273 · Linux · Linux

Published 2026-06-25 · Updated 2026-06-25 · CVE-2026-53177

Mitre

In the Linux kernel, the following vulnerability has been resolved:

bnxt en: Fix NULL pointer dereference

PCIe errors detected by a Root Port or Downstream Port cause error recovery services to run on all subordinate devices regardless of administrative state.

The .error detected() callback, bnxt io error detected(), disables and synchronizes IRQs via bnxt disable int sync(), which calls bnxt cp num to irq num() to map completion rings to IRQs using bp->bnapi.

Since bp->bnapi is allocated on NIC open and freed on NIC close, PCIe error recovery on a closed NIC can dereference a NULL pointer.

Check if bp->bnapi is NULL before disabling and synchronizing IRQs.

Related Identifiers

CVE-2026-53177

Affected Products

Linux

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2026-53177 · Security Note
• https://git.kernel.org/stable/c/580844a9683afe7974856dd5b7886447435b3474 · Note
• https://git.kernel.org/stable/c/3884976f87448e269908ae61bd5d62d54ce9c0c7 · Note
• https://git.kernel.org/stable/c/964b1c3eb71afe58bb61c8b984164447e000ae8a · Note
• https://git.kernel.org/stable/c/08e57d014ea19f303d5d57a849beb846f37788b7 · Note
• https://git.kernel.org/stable/c/d930276f2cddd0b7294cac7a8fe7b877f6d9e08d · Note
• https://git.kernel.org/stable/c/59c5a3e69c7630a811565937e64be70b08436761 · Note
• https://git.kernel.org/stable/c/1a418ad0e5e525d1d117dd1601681f75455af320 · Note