CVE-2026-43260

EUVD-2026-27820
In the Linux kernel, the following vulnerability has been resolved:

bnxt_en: Fix RSS context delete logic

We need to free the corresponding RSS context VNIC
in FW everytime an RSS context is deleted in driver.
Commit 667ac333dbb7 added a check to delete the VNIC
in FW only when netif_running() is true to help delete
RSS contexts with interface down.

Having that condition will make the driver leak VNICs
in FW whenever close() happens with active RSS contexts.
On the subsequent open(), as part of RSS context restoration,
we will end up trying to create extra VNICs for which we
did not make any reservation. FW can fail this request,
thereby making us lose active RSS contexts.

Suppose an RSS context is deleted already and we try to
process a delete request again, then the HWRM functions
will check for validity of the request and they simply
return if the resource is already freed. So, even for
delete-when-down cases, netif_running() check is not
necessary.

Remove the netif_running() condition check when deleting
an RSS context.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
7.8 HIGH
LOCAL
LOW
LOW
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 3%
Affected Products (NVD)
VendorProductVersion
linuxlinux_kernel
6.11 ≤
𝑥
< 6.12.75
linuxlinux_kernel
6.13 ≤
𝑥
< 6.18.16
linuxlinux_kernel
6.19 ≤
𝑥
< 6.19.6
linuxlinux_kernel
7.0:rc1
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
linux
bookworm
6.1.170-3
fixed
bookworm (security)
6.1.174-1
fixed
bullseye
5.10.223-1
fixed
bullseye (security)
5.10.257-1
fixed
forky
7.0.12-2
fixed
sid
7.0.13-1
fixed
trixie
6.12.86-1
fixed
trixie (security)
6.12.94-1
fixed
Red Hat logo
Red Hat Enterprise Linux Releases
Red Hat Product
Release
kernel
RHEL 9
0:5.14.0-687.17.1.el9_8
fixed
kernel-64k
RHEL 9
0:5.14.0-687.17.1.el9_8
fixed
kernel-64k-core
RHEL 9
0:5.14.0-687.17.1.el9_8
fixed
kernel-64k-debug
RHEL 9
0:5.14.0-687.17.1.el9_8
fixed
kernel-64k-debug-core
RHEL 9
0:5.14.0-687.17.1.el9_8
fixed
kernel-64k-debug-devel
RHEL 9
0:5.14.0-687.17.1.el9_8
fixed
kernel-64k-debug-devel-matched
RHEL 9
0:5.14.0-687.17.1.el9_8
fixed
kernel-64k-debug-modules
RHEL 9
0:5.14.0-687.17.1.el9_8
fixed
kernel-64k-debug-modules-core
RHEL 9
0:5.14.0-687.17.1.el9_8
fixed
kernel-64k-debug-modules-extra
RHEL 9
0:5.14.0-687.17.1.el9_8
fixed
kernel-64k-devel
RHEL 9
0:5.14.0-687.17.1.el9_8
fixed
kernel-64k-devel-matched
RHEL 9
0:5.14.0-687.17.1.el9_8
fixed
kernel-64k-modules
RHEL 9
0:5.14.0-687.17.1.el9_8
fixed
kernel-64k-modules-core
RHEL 9
0:5.14.0-687.17.1.el9_8
fixed
kernel-64k-modules-extra
RHEL 9
0:5.14.0-687.17.1.el9_8
fixed
kernel-abi-stablelists
RHEL 9
0:5.14.0-687.17.1.el9_8
fixed
kernel-core
RHEL 9
0:5.14.0-687.17.1.el9_8
fixed
kernel-debug
RHEL 9
0:5.14.0-687.17.1.el9_8
fixed
kernel-debug-core
RHEL 9
0:5.14.0-687.17.1.el9_8
fixed
kernel-debug-devel
RHEL 9
0:5.14.0-687.17.1.el9_8
fixed
kernel-debug-devel-matched
RHEL 9
0:5.14.0-687.17.1.el9_8
fixed
kernel-debug-modules
RHEL 9
0:5.14.0-687.17.1.el9_8
fixed
kernel-debug-modules-core
RHEL 9
0:5.14.0-687.17.1.el9_8
fixed
kernel-debug-modules-extra
RHEL 9
0:5.14.0-687.17.1.el9_8
fixed
kernel-debug-uki-virt
RHEL 9
0:5.14.0-687.17.1.el9_8
fixed
kernel-devel
RHEL 9
0:5.14.0-687.17.1.el9_8
fixed
kernel-devel-matched
RHEL 9
0:5.14.0-687.17.1.el9_8
fixed
kernel-doc
RHEL 9
0:5.14.0-687.17.1.el9_8
fixed
kernel-modules
RHEL 9
0:5.14.0-687.17.1.el9_8
fixed
kernel-modules-core
RHEL 9
0:5.14.0-687.17.1.el9_8
fixed
kernel-modules-extra
RHEL 9
0:5.14.0-687.17.1.el9_8
fixed
kernel-rt
RHEL 9
0:5.14.0-687.17.1.el9_8
fixed
kernel-rt-64k
RHEL 9
0:5.14.0-687.17.1.el9_8
fixed
kernel-rt-64k-core
RHEL 9
0:5.14.0-687.17.1.el9_8
fixed
kernel-rt-64k-debug
RHEL 9
0:5.14.0-687.17.1.el9_8
fixed
kernel-rt-64k-debug-core
RHEL 9
0:5.14.0-687.17.1.el9_8
fixed
kernel-rt-64k-debug-devel
RHEL 9
0:5.14.0-687.17.1.el9_8
fixed
kernel-rt-64k-debug-modules
RHEL 9
0:5.14.0-687.17.1.el9_8
fixed
kernel-rt-64k-debug-modules-core
RHEL 9
0:5.14.0-687.17.1.el9_8
fixed
kernel-rt-64k-debug-modules-extra
RHEL 9
0:5.14.0-687.17.1.el9_8
fixed
kernel-rt-64k-devel
RHEL 9
0:5.14.0-687.17.1.el9_8
fixed
kernel-rt-64k-modules
RHEL 9
0:5.14.0-687.17.1.el9_8
fixed
kernel-rt-64k-modules-core
RHEL 9
0:5.14.0-687.17.1.el9_8
fixed
kernel-rt-64k-modules-extra
RHEL 9
0:5.14.0-687.17.1.el9_8
fixed
kernel-rt-core
RHEL 9
0:5.14.0-687.17.1.el9_8
fixed
kernel-rt-debug
RHEL 9
0:5.14.0-687.17.1.el9_8
fixed
kernel-rt-debug-core
RHEL 9
0:5.14.0-687.17.1.el9_8
fixed
kernel-rt-debug-devel
RHEL 9
0:5.14.0-687.17.1.el9_8
fixed
kernel-rt-debug-modules
RHEL 9
0:5.14.0-687.17.1.el9_8
fixed
kernel-rt-debug-modules-core
RHEL 9
0:5.14.0-687.17.1.el9_8
fixed
kernel-rt-debug-modules-extra
RHEL 9
0:5.14.0-687.17.1.el9_8
fixed
kernel-rt-devel
RHEL 9
0:5.14.0-687.17.1.el9_8
fixed
kernel-rt-modules
RHEL 9
0:5.14.0-687.17.1.el9_8
fixed
kernel-rt-modules-core
RHEL 9
0:5.14.0-687.17.1.el9_8
fixed
kernel-rt-modules-extra
RHEL 9
0:5.14.0-687.17.1.el9_8
fixed
kernel-tools
RHEL 9
0:5.14.0-687.17.1.el9_8
fixed
kernel-tools-libs
RHEL 9
0:5.14.0-687.17.1.el9_8
fixed
kernel-tools-libs-devel
RHEL 9
0:5.14.0-687.17.1.el9_8
fixed
kernel-uki-virt
RHEL 9
0:5.14.0-687.17.1.el9_8
fixed
kernel-uki-virt-addons
RHEL 9
0:5.14.0-687.17.1.el9_8
fixed
kernel-zfcpdump
RHEL 9
0:5.14.0-687.17.1.el9_8
fixed
kernel-zfcpdump-core
RHEL 9
0:5.14.0-687.17.1.el9_8
fixed
kernel-zfcpdump-devel
RHEL 9
0:5.14.0-687.17.1.el9_8
fixed
kernel-zfcpdump-devel-matched
RHEL 9
0:5.14.0-687.17.1.el9_8
fixed
kernel-zfcpdump-modules
RHEL 9
0:5.14.0-687.17.1.el9_8
fixed
kernel-zfcpdump-modules-core
RHEL 9
0:5.14.0-687.17.1.el9_8
fixed
kernel-zfcpdump-modules-extra
RHEL 9
0:5.14.0-687.17.1.el9_8
fixed
libperf
RHEL 9
0:5.14.0-687.17.1.el9_8
fixed
perf
RHEL 9
0:5.14.0-687.17.1.el9_8
fixed
python3-perf
RHEL 9
0:5.14.0-687.17.1.el9_8
fixed
rtla
RHEL 9
0:5.14.0-687.17.1.el9_8
fixed
rv
RHEL 9
0:5.14.0-687.17.1.el9_8
fixed