Memory Exposure Vulnerability in Linux Kernel's bnxt_re Driver

CVE-2026-74584

What is CVE-2026-74584?

A vulnerability exists in the bnxt_re driver of the Linux kernel, where a shared memory page is allocated without being zeroed out first. This oversight allows the potential exposure of stale kernel data from previously freed objects to userspace applications when accessing the /dev/infiniband/uverbsX device. The vulnerability arises in the bnxt_re_alloc_ucontext() function, where the uninitialized page is mapped with vm_insert_page(), allowing unauthorized access to sensitive kernel memory contents. The issue can be mitigated by using properly initialized memory pages in alignment with the existing secure handling in other shared pages within the driver.

References