CVE-2026-98356: RDMA/bnxt_re: check create_singlethread_workqueue() in DCB setup

Severity: unknown
Exploited in the wild: not listed in CISA KEV
EPSS: 0.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2026-10-06 · updated 2026-10-19

Description

In the Linux kernel, the following vulnerability has been resolved: RDMA/bnxt_re: check create_singlethread_workqueue() in DCB setup bnxt_re_init_dcb_wq() ignores a failed allocation. The async DCB handler later calls queue_work() on the NULL pointer.

Affected products

Linux kernel: 6.14 — fixed in 7.3

How to fix

Upgrade to a fixed version: Linux kernel 7.3. Check the vendor advisory for mitigations.

References

https://git.kernel.org/stable/c/6c368f7baaea63c1c7c28c6df271511f2a1562c9
https://git.kernel.org/stable/c/727bbda37d9758960c346546004eea4ad49242e1
https://git.kernel.org/stable/c/a0fb2007d00b440fd1adddd9b042f01744ed0efc

Get alerted when CVE-2026-98356 or the next vulnerability affects your stack