CVE-2026-72499

HighCVSS 8.8/10Last modified Oct 21, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

RDMA/bnxt_re: Free CQ toggle page after firmware teardown

Free the toggle page only after firmware teardown completes so that an NQ interrupt arriving during bnxt_qplib_destroy_cq() won't write the toggle value to an already-freed page. Move free_page() after bnxt_qplib_destroy_cq.

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Affected software

Source: the vendor's advisory (CNA). NVD analysis pending.

Vendor	Product	Versions
Linux	Linux	>= e275919d96693c5ca964b20d73a33d52a7e57f04, < 8a8d69a01bda1fec9b07b5559be2b6ed45b1e974; >= e275919d96693c5ca964b20d73a33d52a7e57f04, < 33aed3ba04aa56eeeb876935896aa6530c46640e; >= e275919d96693c5ca964b20d73a33d52a7e57f04, < b193854675ecad43b4d69c304c1b6a90b206cc99; >= e275919d96693c5ca964b20d73a33d52a7e57f04, < bb45e06f9914ca64ac95341a80a0c20bb8dd46a9
Linux	Linux	6.8

References

Timeline

Published: Aug 15, 2026
Last modified: Oct 21, 2026
NVD status: Received

Related CVEs from 2026

CVE-2026-72507.5GitLab has remediated an issue in GitLab CE/EE affecting all versions from 12.10 before 18.10.8, 18.11 before 18.11.5, and 19.0 before 19.0.CVE-2026-725008.8In the Linux kernel, the following vulnerability has been resolved: RDMA/bnxt_re: Free SRQ toggle page after firmware teardown Free the to CVE-2026-72501In the Linux kernel, the following vulnerability has been resolved: RDMA/bnxt_re: Initialize dpi variable to zero dpi is initialized only CVE-2026-725027.5In the Linux kernel, the following vulnerability has been resolved: tcp: ipv6: clamp default adverting MSS to avoid GSO_BY_FRAGS (0xFFFF) CVE-2026-725065.1VoiceTra provided by National Institute of Information and Communications Technology (NICT) contains an incorrectly specified destination in CVE-2026-725079.0The "reportType" parameter in the product summary report feature within the balancing reports section is susceptible to a time-based blind S CVE-2026-725089.9A flaw was found in the multicloud-operators-subscription component of Red Hat Advanced Cluster Management (RHACM). This vulnerability allow CVE-2026-72519.8Eppendorf BioFlo 320 is vulnerable due to VNC server using a hard-coded password. If a remote attacker knows the network address of any BioF CVE-2026-725109.0The "supplier_no" parameter used in the business allocation search feature is vulnerable to time-based blind SQL injection.CVE-2026-72528.1The WP-Optimize – Cache, Compress images, Minify & Clean database to boost page speed & performance plugin for WordPress is vulnerable to ar CVE-2026-725226.2libexpat before 2.8.3 has an out-of-bounds read and resultant infinite loop because low surrogates are treated the same as high surrogates d CVE-2026-725248.8Incorrect Authorization vulnerability in Apache Doris allows an authenticated user to bypass privilege checks and access or modify data they