SB20260928355 - Unchecked Return Value in Linux kernel broadcom bnxt driver

Description

This security bulletin contains information about 1 vulnerability.

1) Unchecked Return Value (CVE-ID: CVE-2026-97573)

CWE-ID: CWE-252 - Unchecked Return Value

CVSSv4: 9.2 [CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

The vulnerability allows a remote attacker to cause a loss of confidentiality, integrity, and availability.

The vulnerability exists due to unchecked return value in bnxt_rx_ring_reset() when resetting receive ring buffers after a buffer allocation failure. A remote attacker can trigger the vulnerable receive-ring reset to cause a loss of confidentiality, integrity, and availability.

Remediation

Install update from vendor's website.

References

• https://git.kernel.org/stable/c/1a3670b6a6b5679fe56c5890157b344f091e64f8
• https://git.kernel.org/stable/c/4a17c73c83798c2fa9c7920ad5a98803adce3e01
• https://git.kernel.org/stable/c/8b2fd5c0aeda935294159206af9d6179282d425a
• https://git.kernel.org/stable/c/961e2a17c5e3559b3f8654d2daabdd25a42e770a