What’s Vulnerable › Vulnerabilities

CVE-2026-72496: RDMA/bnxt_re: Proper rollback if the ioremap fails

• Severity: critical (CVSS 9.2 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.1% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-08-15 · updated 2026-10-16

Description

In the Linux kernel, the following vulnerability has been resolved: RDMA/bnxt_re: Proper rollback if the ioremap fails bnxt_qplib_alloc_dpi returns success even if ioremap fails. Add the proper rollback when the ioremap fails and return -ENOMEM status.

Affected products

• Linux kernel: 6.5 — fixed in 7.2

How to fix

Upgrade to a fixed version: Linux kernel 7.2. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/00444baa8f74d220764ee5903f60759c120cabd5
• https://git.kernel.org/stable/c/303f6fef95df5e5316970746d861cf6daeeca77f
• https://git.kernel.org/stable/c/3c69ff7f4a761e18ce8abfa0c98e12097b39adaa
• https://git.kernel.org/stable/c/87267803a8c824616eb147c5dad7030a5db6f878
• https://git.kernel.org/stable/c/f956477c343aa73e9d9c8d6ebf32efac7cd4f4e2

Get alerted when CVE-2026-72496 or the next vulnerability affects your stack