CVE-2026-74269
Description
A flaw was found in the bnxt driver, a component of the Linux kernel responsible for network card operations. This vulnerability involves a memory corruption issue that occurs during specific network data processing (XDP head-grow operations). An underflow in the driver's code can lead to incorrect management of memory, potentially resulting in a 'double free' error. If exploited, this could allow an attacker to cause a denial of service, making the system unavailable, or lead to other unpredictable system behavior.
Mitigation
Prevent the Broadcom NetXtreme network driver from loading if the hardware is not required:
1. Add a configuration rule to disable module loading:
# echo "install bnxt_en /bin/true" > /etc/modprobe.d/disable-bnxt_en.conf
2. If the module is currently loaded, unload it:
# modprobe -r bnxt_en
Alternatively, ensure that attached eBPF/XDP programs do not perform packet head expansion operations.
Warning: Blacklisting the bnxt_en module will disable all network interfaces reliant on Broadcom NetXtreme devices. If the module is actively in use by network adapters, unloading it will disrupt connectivity, and a system restart will be required for the configuration change to take effect.
Common Vulnerability Scoring System (CVSS) Score Details
Info alert:Important note
CVSS scores for open source components depend on vendor-specific factors (e.g. version or build chain). Therefore, Red Hat's score and impact rating can be different from NVD and other vendors. Red Hat remains the authoritative CVE Naming Authority (CNA) source for its products and services (see Red Hat classifications).
The following CVSS metrics and score provided are preliminary and subject to review.
CVSS v3 Score Breakdown
| Red Hat | NVD | cve.org | |
|---|---|---|---|
| Base Score | 7 | N/A | 9.8 |
| Attack Vector | Local | N/A | Network |
| Attack Complexity | High | N/A | Low |
| Privileges Required | Low | N/A | None |
| User Interaction | None | N/A | None |
| Scope | Unchanged | N/A | Unchanged |
| Confidentiality | High | N/A | High |
| Integrity Impact | High | N/A | High |
| Availability Impact | High | N/A | High |
Vector
Red Hat: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
cve.org: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Frequently Asked Questions
Not sure what something means? Check out our Security Glossary.
Want to get errata notifications? Sign up here.
