{"id":"CVE-2026-97572","summary":"bnxt_en: Propagate RX ring init failures in bnxt_init_nic()","details":"In the Linux kernel, the following vulnerability has been resolved:\n\nbnxt_en: Propagate RX ring init failures in bnxt_init_nic()\n\nbnxt_init_rx_rings() returns an error when bnxt_alloc_one_rx_ring()\nfails, but bnxt_init_nic() discards that return value and calls\nbnxt_init_chip(), which enables TPA.\n\nIf an allocation fails, this could leave rxr-\u003erx_tpa[] partially zeroed\nand TPA would be enabled over an array with zeroed entries. This would\nlead to a zeroed DMA address being handed out if the agg_idx is\ntranslated to a SW index at a zeroed entry.\n\nFix this by propagating the error out of bnxt_init_nic(). Both callers\nalready check its return value and unwind with bnxt_free_skbs() and\nbnxt_free_mem(), which tolerate a partially initialized RX ring.","modified":"2026-09-26T03:48:36.142361441Z","published":"2026-09-25T10:21:56.826Z","database_specific":{"osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97572.json","cna_assigner":"Linux"},"references":[{"type":"PACKAGE","url":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git"},{"type":"WEB","url":"https://git.kernel.org/stable/c/8e6a850c0746bb4be167aedf1ee57469fcda09a9"},{"type":"WEB","url":"https://git.kernel.org/stable/c/b4c40f2c80d7bf50648878bc206a39adfbfaec6c"},{"type":"WEB","url":"https://git.kernel.org/stable/c/daadccd062fdca5e77a8cc22ffe35857803b6c49"},{"type":"WEB","url":"https://git.kernel.org/stable/c/dfd73af81cdb9f7b399754a59e2658a08211bee5"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97572.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-97572"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","events":[{"introduced":"c0c050c58d840994ba842ad1c338a98e7c12b764"},{"fixed":"daadccd062fdca5e77a8cc22ffe35857803b6c49"},{"fixed":"b4c40f2c80d7bf50648878bc206a39adfbfaec6c"},{"fixed":"dfd73af81cdb9f7b399754a59e2658a08211bee5"},{"fixed":"8e6a850c0746bb4be167aedf1ee57469fcda09a9"}]}],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-97572.json"}},{"package":{"name":"Kernel","ecosystem":"Linux"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.4.0"},{"fixed":"6.12.111"}]},{"type":"ECOSYSTEM","events":[{"introduced":"6.13.0"},{"fixed":"6.18.53"}]},{"type":"ECOSYSTEM","events":[{"introduced":"6.19.0"},{"fixed":"7.2.7"}]}],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-97572.json"}}],"schema_version":"1.9.0"}