Vulnerability-Lookup

CVE-2026-97574 (GCVE-0-2026-97574)

Vulnerability from cvelistv5 – Published: 2026-09-25 10:21 – Updated: 2026-10-19 09:09

Title

bnxt_en: Don't free the live ring's TPA state on queue restart failure

Summary

In the Linux kernel, the following vulnerability has been resolved: bnxt_en: Don't free the live ring's TPA state on queue restart failure bnxt_queue_mem_alloc() shallow copies the live RX ring into the clone: memcpy(clone, rxr, sizeof(*rxr)); the code currently clears pointers that the clone owns (such as rx_agg_bmap), but rx_tpa and rx_tpa_idx_map are left pointing at memory of the live ring that was cloned. If an allocation failure happens later and the err_free_tpa_info label is taken, the live ring's memory can be freed while still in use. Fix this by initializing the clone's pointers to NULL to prevent live ring state from being freed inadvertently.

Severity

No CVSS data available.

Assigner

Linux CNA under the mitre root

CNA scorecard D 53/100 over 6856 records in the last 180 days details

References

4 references

URL	Tags
https://git.kernel.org/stable/c/e42287b4d38d653f7…
https://git.kernel.org/stable/c/8ade95619cbfd1fc5…
https://git.kernel.org/stable/c/0596a7caa6fc283e1…
https://git.kernel.org/stable/c/5ce7f36c334d72395…

Impacted products

2 products

Vendor	Product	Version	CPE status
Linux	Linux	Affected: 0997443906b96a051011f220a61e6dce4602ec54 , < e42287b4d38d653f7d4a47f6c29b0c01288bb050 (git) Affected: bd649c5cc958169b8a8a3e77ea926d92d472b02a , < 8ade95619cbfd1fc57f0f1a9a5ebdca2345a8d27 (git) Affected: bd649c5cc958169b8a8a3e77ea926d92d472b02a , < 0596a7caa6fc283e142716739099c038d8714082 (git) Affected: bd649c5cc958169b8a8a3e77ea926d92d472b02a , < 5ce7f36c334d723954855ac769ede2fe0e8f89c8 (git) Affected: 6.12.20 , < 6.12.112 (semver)	guessed
Linux	Linux	Affected: 6.13 Unaffected: 0 , < 6.13 (semver) Unaffected: 6.12.112 , ≤ 6.12.* (semver) Unaffected: 6.18.53 , ≤ 6.18.* (semver) Unaffected: 7.2.7 , ≤ 7.2.* (semver) Unaffected: 7.3 , ≤ * (original_commit_for_fix)	guessed

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "drivers/net/ethernet/broadcom/bnxt/bnxt.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "e42287b4d38d653f7d4a47f6c29b0c01288bb050",
              "status": "affected",
              "version": "0997443906b96a051011f220a61e6dce4602ec54",
              "versionType": "git"
            },
            {
              "lessThan": "8ade95619cbfd1fc57f0f1a9a5ebdca2345a8d27",
              "status": "affected",
              "version": "bd649c5cc958169b8a8a3e77ea926d92d472b02a",
              "versionType": "git"
            },
            {
              "lessThan": "0596a7caa6fc283e142716739099c038d8714082",
              "status": "affected",
              "version": "bd649c5cc958169b8a8a3e77ea926d92d472b02a",
              "versionType": "git"
            },
            {
              "lessThan": "5ce7f36c334d723954855ac769ede2fe0e8f89c8",
              "status": "affected",
              "version": "bd649c5cc958169b8a8a3e77ea926d92d472b02a",
              "versionType": "git"
            },
            {
              "lessThan": "6.12.112",
              "status": "affected",
              "version": "6.12.20",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "drivers/net/ethernet/broadcom/bnxt/bnxt.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "6.13"
            },
            {
              "lessThan": "6.13",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.12.*",
              "status": "unaffected",
              "version": "6.12.112",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.18.*",
              "status": "unaffected",
              "version": "6.18.53",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.2.*",
              "status": "unaffected",
              "version": "7.2.7",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "7.3",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.12.112",
                  "versionStartIncluding": "6.12.20",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.18.53",
                  "versionStartIncluding": "6.13",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "7.2.7",
                  "versionStartIncluding": "6.13",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "7.3",
                  "versionStartIncluding": "6.13",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nbnxt_en: Don\u0027t free the live ring\u0027s TPA state on queue restart failure\n\nbnxt_queue_mem_alloc() shallow copies the live RX ring into the clone:\n\n  memcpy(clone, rxr, sizeof(*rxr));\n\nthe code currently clears pointers that the clone owns (such as\nrx_agg_bmap), but rx_tpa and rx_tpa_idx_map are left pointing at memory\nof the live ring that was cloned.\n\nIf an allocation failure happens later and the err_free_tpa_info label\nis taken, the live ring\u0027s memory can be freed while still in use.\n\nFix this by initializing the clone\u0027s pointers to NULL to prevent live\nring state from being freed inadvertently."
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-19T09:09:36.867Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/e42287b4d38d653f7d4a47f6c29b0c01288bb050"
        },
        {
          "url": "https://git.kernel.org/stable/c/8ade95619cbfd1fc57f0f1a9a5ebdca2345a8d27"
        },
        {
          "url": "https://git.kernel.org/stable/c/0596a7caa6fc283e142716739099c038d8714082"
        },
        {
          "url": "https://git.kernel.org/stable/c/5ce7f36c334d723954855ac769ede2fe0e8f89c8"
        }
      ],
      "title": "bnxt_en: Don\u0027t free the live ring\u0027s TPA state on queue restart failure",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2026-97574",
    "datePublished": "2026-09-25T10:21:58.062Z",
    "dateReserved": "2026-09-24T16:01:01.156Z",
    "dateUpdated": "2026-10-19T09:09:36.867Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2026-97574",
      "date": "2026-10-21",
      "epss": "0.002",
      "percentile": "0.09283"
    },
    "microsoft_vex": {
      "current_release_date": "2026-10-21T18:39:00.000Z",
      "cve": "CVE-2026-97574",
      "id": "msrc_CVE-2026-97574",
      "initial_release_date": "2026-10-20T22:23:32.000Z",
      "product_status:under_investigation": "1",
      "source": "Microsoft CSAF VEX",
      "status": "final",
      "title": "bnxt_en: Don\u0027t free the live ring\u0027s TPA state on queue restart failure",
      "url": "https://msrc.microsoft.com/csaf/vex/2026/msrc_cve-2026-97574.json",
      "version": "2"
    },
    "nvd": {
      "cve": {
        "affected": [
          {
            "affectedData": [
              {
                "defaultStatus": "unaffected",
                "product": "Linux",
                "programFiles": [
                  "drivers/net/ethernet/broadcom/bnxt/bnxt.c"
                ],
                "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
                "vendor": "Linux",
                "versions": [
                  {
                    "lessThan": "e42287b4d38d653f7d4a47f6c29b0c01288bb050",
                    "status": "affected",
                    "version": "0997443906b96a051011f220a61e6dce4602ec54",
                    "versionType": "git"
                  },
                  {
                    "lessThan": "8ade95619cbfd1fc57f0f1a9a5ebdca2345a8d27",
                    "status": "affected",
                    "version": "bd649c5cc958169b8a8a3e77ea926d92d472b02a",
                    "versionType": "git"
                  },
                  {
                    "lessThan": "0596a7caa6fc283e142716739099c038d8714082",
                    "status": "affected",
                    "version": "bd649c5cc958169b8a8a3e77ea926d92d472b02a",
                    "versionType": "git"
                  },
                  {
                    "lessThan": "5ce7f36c334d723954855ac769ede2fe0e8f89c8",
                    "status": "affected",
                    "version": "bd649c5cc958169b8a8a3e77ea926d92d472b02a",
                    "versionType": "git"
                  },
                  {
                    "lessThan": "6.12.112",
                    "status": "affected",
                    "version": "6.12.20",
                    "versionType": "semver"
                  }
                ]
              },
              {
                "defaultStatus": "affected",
                "product": "Linux",
                "programFiles": [
                  "drivers/net/ethernet/broadcom/bnxt/bnxt.c"
                ],
                "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
                "vendor": "Linux",
                "versions": [
                  {
                    "status": "affected",
                    "version": "6.13"
                  },
                  {
                    "lessThan": "6.13",
                    "status": "unaffected",
                    "version": "0",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "6.12.*",
                    "status": "unaffected",
                    "version": "6.12.112",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "6.18.*",
                    "status": "unaffected",
                    "version": "6.18.53",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "7.2.*",
                    "status": "unaffected",
                    "version": "7.2.7",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "*",
                    "status": "unaffected",
                    "version": "7.3",
                    "versionType": "original_commit_for_fix"
                  }
                ]
              }
            ],
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
          }
        ],
        "cveTags": [],
        "descriptions": [
          {
            "lang": "en",
            "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nbnxt_en: Don\u0027t free the live ring\u0027s TPA state on queue restart failure\n\nbnxt_queue_mem_alloc() shallow copies the live RX ring into the clone:\n\n  memcpy(clone, rxr, sizeof(*rxr));\n\nthe code currently clears pointers that the clone owns (such as\nrx_agg_bmap), but rx_tpa and rx_tpa_idx_map are left pointing at memory\nof the live ring that was cloned.\n\nIf an allocation failure happens later and the err_free_tpa_info label\nis taken, the live ring\u0027s memory can be freed while still in use.\n\nFix this by initializing the clone\u0027s pointers to NULL to prevent live\nring state from being freed inadvertently."
          }
        ],
        "id": "CVE-2026-97574",
        "lastModified": "2026-10-19T10:17:26.613",
        "metrics": {},
        "published": "2026-09-25T11:17:08.127",
        "references": [
          {
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            "url": "https://git.kernel.org/stable/c/0596a7caa6fc283e142716739099c038d8714082"
          },
          {
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            "url": "https://git.kernel.org/stable/c/5ce7f36c334d723954855ac769ede2fe0e8f89c8"
          },
          {
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            "url": "https://git.kernel.org/stable/c/8ade95619cbfd1fc57f0f1a9a5ebdca2345a8d27"
          },
          {
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            "url": "https://git.kernel.org/stable/c/e42287b4d38d653f7d4a47f6c29b0c01288bb050"
          }
        ],
        "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "vulnStatus": "Received"
      }
    },
    "redhat_vex": {
      "aggregate_severity": "Moderate",
      "current_release_date": "2026-10-17T21:40:56+00:00",
      "cve": "CVE-2026-97574",
      "id": "CVE-2026-97574",
      "initial_release_date": "2026-09-25T00:00:00+00:00",
      "product_status:known_affected": "184",
      "product_status:known_not_affected": "93",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "kernel: bnxt_en: Don\u0027t free the live ring\u0027s TPA state on queue restart failure",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-97574.json",
      "version": "3"
    },
    "suse_vex": {
      "aggregate_severity": "moderate",
      "current_release_date": "2026-10-20T00:15:26Z",
      "cve": "CVE-2026-97574",
      "id": "CVE-2026-97574",
      "initial_release_date": "2026-10-01T16:06:57Z",
      "product_status:known_affected": "449",
      "product_status:known_not_affected": "338",
      "product_status:recommended": "93",
      "source": "SUSE CSAF VEX",
      "status": "interim",
      "title": "SUSE CVE CVE-2026-97574",
      "url": "https://ftp.suse.com/pub/projects/security/csaf-vex/2026/cve-2026-97574.json",
      "version": "4"
    }
  }
}

BELL-CVE-2026-97574 (CVE-2026-97574)

Vulnerability from osv_bellsoft – Published: 2026-09-29 06:08 – Updated: 2026-10-08 06:25 – Source website

References

URL

Type

https://docs.bell-sw.com/security/cves/CVE-2026-97574

ADVISORY

JSON

To clipboard

{
  "affected": [
    {
      "package": {
        "ecosystem": "Alpaquita:stream",
        "name": "linux-lts",
        "purl": "pkg:apk/alpaquita/linux-lts?arch=source\u0026distro=stream"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "6.18.46-r0"
            },
            {
              "fixed": "6.18.53-r0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    }
  ],
  "id": "BELL-CVE-2026-97574",
  "modified": "2026-10-08T06:25:16.203284Z",
  "published": "2026-09-29T06:08:07.974532Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://docs.bell-sw.com/security/cves/CVE-2026-97574"
    }
  ],
  "schema_version": "1.7.4",
  "upstream": [
    "CVE-2026-97574"
  ]
}

FKIE_CVE-2026-97574

Vulnerability from fkie_nvd - Published: 2026-09-25 11:17 - Updated: 2026-10-19 10:17

Severity

Summary

References

	URL	Tags
	416baaa9-dc9f-4396-8d5f-8c081fb06d67	https://git.kernel.org/stable/c/0596a7caa6fc283e142716739099c038d8714082
	416baaa9-dc9f-4396-8d5f-8c081fb06d67	https://git.kernel.org/stable/c/5ce7f36c334d723954855ac769ede2fe0e8f89c8
	416baaa9-dc9f-4396-8d5f-8c081fb06d67	https://git.kernel.org/stable/c/8ade95619cbfd1fc57f0f1a9a5ebdca2345a8d27
	416baaa9-dc9f-4396-8d5f-8c081fb06d67	https://git.kernel.org/stable/c/e42287b4d38d653f7d4a47f6c29b0c01288bb050

Impacted products

	Vendor	Product	Version

JSON

To clipboard

{
  "affected": [
    {
      "affectedData": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "drivers/net/ethernet/broadcom/bnxt/bnxt.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "e42287b4d38d653f7d4a47f6c29b0c01288bb050",
              "status": "affected",
              "version": "0997443906b96a051011f220a61e6dce4602ec54",
              "versionType": "git"
            },
            {
              "lessThan": "8ade95619cbfd1fc57f0f1a9a5ebdca2345a8d27",
              "status": "affected",
              "version": "bd649c5cc958169b8a8a3e77ea926d92d472b02a",
              "versionType": "git"
            },
            {
              "lessThan": "0596a7caa6fc283e142716739099c038d8714082",
              "status": "affected",
              "version": "bd649c5cc958169b8a8a3e77ea926d92d472b02a",
              "versionType": "git"
            },
            {
              "lessThan": "5ce7f36c334d723954855ac769ede2fe0e8f89c8",
              "status": "affected",
              "version": "bd649c5cc958169b8a8a3e77ea926d92d472b02a",
              "versionType": "git"
            },
            {
              "lessThan": "6.12.112",
              "status": "affected",
              "version": "6.12.20",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "drivers/net/ethernet/broadcom/bnxt/bnxt.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "6.13"
            },
            {
              "lessThan": "6.13",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.12.*",
              "status": "unaffected",
              "version": "6.12.112",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.18.*",
              "status": "unaffected",
              "version": "6.18.53",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.2.*",
              "status": "unaffected",
              "version": "7.2.7",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "7.3",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nbnxt_en: Don\u0027t free the live ring\u0027s TPA state on queue restart failure\n\nbnxt_queue_mem_alloc() shallow copies the live RX ring into the clone:\n\n  memcpy(clone, rxr, sizeof(*rxr));\n\nthe code currently clears pointers that the clone owns (such as\nrx_agg_bmap), but rx_tpa and rx_tpa_idx_map are left pointing at memory\nof the live ring that was cloned.\n\nIf an allocation failure happens later and the err_free_tpa_info label\nis taken, the live ring\u0027s memory can be freed while still in use.\n\nFix this by initializing the clone\u0027s pointers to NULL to prevent live\nring state from being freed inadvertently."
    }
  ],
  "id": "CVE-2026-97574",
  "lastModified": "2026-10-19T10:17:26.613",
  "metrics": {},
  "published": "2026-09-25T11:17:08.127",
  "references": [
    {
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "url": "https://git.kernel.org/stable/c/0596a7caa6fc283e142716739099c038d8714082"
    },
    {
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "url": "https://git.kernel.org/stable/c/5ce7f36c334d723954855ac769ede2fe0e8f89c8"
    },
    {
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "url": "https://git.kernel.org/stable/c/8ade95619cbfd1fc57f0f1a9a5ebdca2345a8d27"
    },
    {
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "url": "https://git.kernel.org/stable/c/e42287b4d38d653f7d4a47f6c29b0c01288bb050"
    }
  ],
  "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
  "vulnStatus": "Received"
}

GHSA-3Q52-V35W-H242

Vulnerability from github – Published: 2026-09-25 12:31 – Updated: 2026-10-03 12:31

Details

In the Linux kernel, the following vulnerability has been resolved:

bnxt_en: Don't free the live ring's TPA state on queue restart failure

bnxt_queue_mem_alloc() shallow copies the live RX ring into the clone:

memcpy(clone, rxr, sizeof(*rxr));

the code currently clears pointers that the clone owns (such as rx_agg_bmap), but rx_tpa and rx_tpa_idx_map are left pointing at memory of the live ring that was cloned.

If an allocation failure happens later and the err_free_tpa_info label is taken, the live ring's memory can be freed while still in use.

Fix this by initializing the clone's pointers to NULL to prevent live ring state from being freed inadvertently.

Show details on source website

JSON

To clipboard

{
  "affected": [],
  "aliases": [
    "CVE-2026-97574"
  ],
  "database_specific": {
    "cwe_ids": [],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2026-09-25T11:17:08Z",
    "severity": null
  },
  "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nbnxt_en: Don\u0027t free the live ring\u0027s TPA state on queue restart failure\n\nbnxt_queue_mem_alloc() shallow copies the live RX ring into the clone:\n\n  memcpy(clone, rxr, sizeof(*rxr));\n\nthe code currently clears pointers that the clone owns (such as\nrx_agg_bmap), but rx_tpa and rx_tpa_idx_map are left pointing at memory\nof the live ring that was cloned.\n\nIf an allocation failure happens later and the err_free_tpa_info label\nis taken, the live ring\u0027s memory can be freed while still in use.\n\nFix this by initializing the clone\u0027s pointers to NULL to prevent live\nring state from being freed inadvertently.",
  "id": "GHSA-3q52-v35w-h242",
  "modified": "2026-10-03T12:31:17Z",
  "published": "2026-09-25T12:31:25Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-97574"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/0596a7caa6fc283e142716739099c038d8714082"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/5ce7f36c334d723954855ac769ede2fe0e8f89c8"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/8ade95619cbfd1fc57f0f1a9a5ebdca2345a8d27"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/e42287b4d38d653f7d4a47f6c29b0c01288bb050"
    }
  ],
  "schema_version": "1.4.0",
  "severity": []
}

MSRC_CVE-2026-97574

Vulnerability from csaf_microsoft - Published: 2026-10-20 22:23 - Updated: 2026-10-21 18:39

Summary

bnxt_en: Don't free the live ring's TPA state on queue restart failure

Scope

1 vulnerability in this advisory, including CVE-2026-97574.

CVE-2026-97574

Under investigation: 1 product

Open the full advisory

OPENSUSE-SU-2026:12074-1

Vulnerability from csaf_opensuse - Published: 2026-10-07 00:00 - Updated: 2026-10-17 09:17

Summary

kernel-devel-7.2.9-1.1 on GA media

Severity

Moderate

Scope

389 vulnerabilities in this advisory, including CVE-2026-97574.

CVE-2026-97574

4.7 (Medium)


                
                  CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:H

Recommended: 16 products

Open the full advisory

OPENSUSE-SU-2026:22091-1

Vulnerability from csaf_opensuse - Published: 2026-10-12 15:44 - Updated: 2026-10-19 17:25

Summary

Security update for the Linux Kernel

Severity

Important

Scope

401 vulnerabilities in this advisory, including CVE-2026-97574.

CVE-2026-97574

4.7 (Medium)


                
                  CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:H

Recommended: 136 products

Open the full advisory

SUSE-SU-2026:24179-1

Vulnerability from csaf_suse - Published: 2026-10-12 13:24 - Updated: 2026-10-20 09:49

Summary

Security update for the Linux Kernel

Severity

Important

Scope

401 vulnerabilities in this advisory, including CVE-2026-97574.

CVE-2026-97574

4.7 (Medium)


                
                  CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:H

Recommended: 8 products

Open the full advisory

SUSE-SU-2026:24184-1

Vulnerability from csaf_suse - Published: 2026-10-12 13:51 - Updated: 2026-10-20 09:49

Summary

Security update for the Linux Kernel

Severity

Important

Scope

401 vulnerabilities in this advisory, including CVE-2026-97574.

CVE-2026-97574

4.7 (Medium)


                
                  CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:H

Recommended: 28 products

Open the full advisory

SUSE-SU-2026:24197-1

Vulnerability from csaf_suse - Published: 2026-10-12 14:15 - Updated: 2026-10-21 11:49

Summary

Security update for the Linux Kernel

Severity

Important

Scope

401 vulnerabilities in this advisory, including CVE-2026-97574.

CVE-2026-97574

4.7 (Medium)


                
                  CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:H

Recommended: 9 products

Open the full advisory

SUSE-SU-2026:24235-1

Vulnerability from csaf_suse - Published: 2026-10-12 13:51 - Updated: 2026-10-21 11:50

Summary

Security update for the Linux Kernel

Severity

Important

Scope

401 vulnerabilities in this advisory, including CVE-2026-97574.

CVE-2026-97574

4.7 (Medium)


                
                  CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:H

Recommended: 114 products

Open the full advisory

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Vulnerability timeline

Sightings and recorded dates, grouped by day · UTC

Order JSON

Publication & reservation Sightings KEV catalogs Other timestamps

Loading timeline…

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

CVE-2026-97574 (GCVE-0-2026-97574)

BELL-CVE-2026-97574 (CVE-2026-97574)

Tags

Sightings

Nomenclature

Vulnerability timeline

Related by attack behaviour