Linux Kernel Vulnerability in RDMA/BNXT_RE Component

CVE-2026-98356

What is CVE-2026-98356?

A vulnerability in the Linux kernel's RDMA/bnxt_re component results from improper resource management during Data Center Bridging (DCB) setup. Specifically, the function 'bnxt_re_init_dcb_wq()' fails to check and handle allocations correctly, leading to the potential dereference of a NULL pointer within the async DCB handler when it invokes 'queue_work()'. This can lead to unexpected behavior or crashes, compromising system integrity. Prompt updates to the kernel are recommended to mitigate the risk associated with this vulnerability.

References