Linux Kernel Vulnerability in bnxt_en Driver Affecting Networking Performance

CVE-2026-43034

What is CVE-2026-43034?

In the Linux kernel's bnxt_en driver, a flaw was identified where the backing store type is incorrectly set from the firmware response. The function bnxt_hwrm_func_backing_store_qcaps_v2() uses a response type to index vital backing store metadata arrays. This approach can lead to improper handling of context management types, creating potential operational issues. The fix involves adjusting the indexing mechanism to use a current loop variable rather than relying solely on firmware response data, enhancing control flow and reliability across various scenarios.

References