NULL pointer dereference in Linux kernel - CVE-2026-53177

Vulnerability identifier: #VU135602

CSH Severity: Low

CVSS v4: 6.8 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2026-53177

CWE-ID: CWE-476

Exploitation vector: Local access

Exploit availability: No public exploit available

The vulnerability allows a local user to cause a denial of service.

The vulnerability exists due to a NULL pointer dereference in the bnxt_io_error_detected error recovery path when handling PCIe error recovery on a closed NIC. A local user can trigger PCIe error recovery for a device whose bnapi state is not allocated to cause a denial of service.

The issue occurs because error recovery services may run on subordinate devices regardless of administrative state.

Linux kernel
openEuler
kernel
bpftool
bpftool-debuginfo
kernel-debuginfo
kernel-debugsource
kernel-devel
kernel-headers
kernel-source
kernel-tools
kernel-tools-debuginfo
kernel-tools-devel
perf
perf-debuginfo
python3-perf
python3-perf-debuginfo

Install security update from vendor's repository.

Linux kernel - update to 7.0 rc3
kernel - update to 6.6.0-145.1.20.157
bpftool - update to 6.6.0-145.1.20.157
bpftool-debuginfo - update to 6.6.0-145.1.20.157
kernel-debuginfo - update to 6.6.0-145.1.20.157
kernel-debugsource - update to 6.6.0-145.1.20.157
kernel-devel - update to 6.6.0-145.1.20.157
kernel-headers - update to 6.6.0-145.1.20.157
kernel-source - update to 6.6.0-145.1.20.157
kernel-tools - update to 6.6.0-145.1.20.157
kernel-tools-debuginfo - update to 6.6.0-145.1.20.157
kernel-tools-devel - update to 6.6.0-145.1.20.157
perf - update to 6.6.0-145.1.20.157
perf-debuginfo - update to 6.6.0-145.1.20.157
python3-perf - update to 6.6.0-145.1.20.157
python3-perf-debuginfo - update to 6.6.0-145.1.20.157

• https://git.kernel.org/stable/c/08e57d014ea19f303d5d57a849beb846f37788b7
• https://git.kernel.org/stable/c/1a418ad0e5e525d1d117dd1601681f75455af320
• https://git.kernel.org/stable/c/3884976f87448e269908ae61bd5d62d54ce9c0c7
• https://git.kernel.org/stable/c/580844a9683afe7974856dd5b7886447435b3474
• https://git.kernel.org/stable/c/59c5a3e69c7630a811565937e64be70b08436761
• https://git.kernel.org/stable/c/964b1c3eb71afe58bb61c8b984164447e000ae8a
• https://git.kernel.org/stable/c/d930276f2cddd0b7294cac7a8fe7b877f6d9e08d

• NULL pointer dereference in Linux kernel broadcom bnxt driver
• openEuler 24.03 LTS SP1 update for kernel