5.5
MEDIUM
CVSS 3.1
CVE-2026-53177
bnxt_en: Fix NULL pointer dereference
Overview
Description
In the Linux kernel, the following vulnerability has been resolved: bnxt_en: Fix NULL pointer dereference PCIe errors detected by a Root Port or Downstream Port cause error recovery services to run on all subordinate devices regardless of administrative state. The .error_detected() callback, bnxt_io_error_detected(), disables and synchronizes IRQs via bnxt_disable_int_sync(), which calls bnxt_cp_num_to_irq_num() to map completion rings to IRQs using bp->bnapi. Since bp->bnapi is allocated on NIC open and freed on NIC close, PCIe error recovery on a closed NIC can dereference a NULL pointer. Check if bp->bnapi is NULL before disabling and synchronizing IRQs.
Details
INFO
Published Date :
June 25, 2026, 9:16 a.m.
Last Modified :
July 6, 2026, 6:20 p.m.
Remotely Exploit :
No
Source :
416baaa9-dc9f-4396-8d5f-8c081fb06d67
Scoring
CVSS Scores
The Common Vulnerability Scoring System is a standardized framework
for assessing the severity of vulnerabilities in software and systems.
We collect and displays CVSS scores from various sources for each CVE.
| Score | Version | Severity | Vector | Exploitability Score | Impact Score | Source |
|---|---|---|---|---|---|---|
| CVSS 3.1 | MEDIUM | [email protected] |
Solution
Apply kernel updates to address NULL pointer dereference during PCIe error recovery.
- Update the Linux kernel to the latest version.
- Ensure drivers are correctly initialized before error recovery.
- Apply the provided patch for bnxt_en module.
References
References to Advisories, Solutions, and Tools
Here, you will find a curated list of external links that provide in-depth
information, practical solutions, and valuable tools related to
CVE-2026-53177.
CWE - Common Weakness Enumeration
While CVE identifies
specific instances of vulnerabilities, CWE categorizes the common flaws or
weaknesses that can lead to vulnerabilities. CVE-2026-53177 is
associated with the following CWEs:
Common Attack Pattern Enumeration and Classification (CAPEC)
Common Attack Pattern Enumeration and Classification
(CAPEC)
stores attack patterns, which are descriptions of the common attributes and
approaches employed by adversaries to exploit the CVE-2026-53177
weaknesses.
We scan GitHub repositories to detect new proof-of-concept exploits. Following list is a collection of public exploits and proof-of-concepts, which have been published on GitHub (sorted by the most recently updated).
Results are limited to the first 15 repositories due to potential performance issues.
The following list is the news that have been mention
CVE-2026-53177 vulnerability anywhere in the article.
The following table lists the changes that have been made to the
CVE-2026-53177 vulnerability over time.
Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability's severity, exploitability, or other characteristics.
-
Initial Analysis by [email protected]
Jul. 06, 2026
Action Type Old Value New Value Added CVSS V3.1 AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H Added CWE CWE-476 Added CPE Configuration OR *cpe:2.3:o:linux:linux_kernel:7.1:rc1:*:*:*:*:*:* *cpe:2.3:o:linux:linux_kernel:7.1:rc2:*:*:*:*:*:* *cpe:2.3:o:linux:linux_kernel:7.1:rc3:*:*:*:*:*:* *cpe:2.3:o:linux:linux_kernel:7.1:rc4:*:*:*:*:*:* *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 5.16 up to (excluding) 6.1.176 *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 6.2 up to (excluding) 6.6.143 *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 6.13 up to (excluding) 6.18.36 *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 6.7 up to (excluding) 6.12.94 *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 6.19 up to (excluding) 7.0.13 *cpe:2.3:o:linux:linux_kernel:7.1:rc5:*:*:*:*:*:* *cpe:2.3:o:linux:linux_kernel:7.1:rc6:*:*:*:*:*:* *cpe:2.3:o:linux:linux_kernel:7.1:rc7:*:*:*:*:*:* *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 4.17 up to (excluding) 5.15.210 Added Reference Type kernel.org: https://git.kernel.org/stable/c/08e57d014ea19f303d5d57a849beb846f37788b7 Types: Patch Added Reference Type kernel.org: https://git.kernel.org/stable/c/1449177b87f768353909e930a99b902675119b2b Types: Patch Added Reference Type kernel.org: https://git.kernel.org/stable/c/1a418ad0e5e525d1d117dd1601681f75455af320 Types: Patch Added Reference Type kernel.org: https://git.kernel.org/stable/c/3884976f87448e269908ae61bd5d62d54ce9c0c7 Types: Patch Added Reference Type kernel.org: https://git.kernel.org/stable/c/580844a9683afe7974856dd5b7886447435b3474 Types: Patch Added Reference Type kernel.org: https://git.kernel.org/stable/c/59c5a3e69c7630a811565937e64be70b08436761 Types: Patch Added Reference Type kernel.org: https://git.kernel.org/stable/c/964b1c3eb71afe58bb61c8b984164447e000ae8a Types: Patch Added Reference Type kernel.org: https://git.kernel.org/stable/c/d930276f2cddd0b7294cac7a8fe7b877f6d9e08d Types: Patch -
CVE Modified by 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Jul. 04, 2026
Action Type Old Value New Value Added Reference https://git.kernel.org/stable/c/1449177b87f768353909e930a99b902675119b2b Changed Affected [{'repo': 'https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git', 'vendor': 'Linux', 'product': 'Linux', 'versions': [{'status': 'affected', 'version': 'e5811b8c09df9bc80eabc95339fceded23f16289', 'lessThan': '964b1c3eb71afe58bb61c8b984164447e000ae8a', 'versionType': 'git'}, {'status': 'affected', 'version': 'e5811b8c09df9bc80eabc95339fceded23f16289', 'lessThan': '59c5a3e69c7630a811565937e64be70b08436761', 'versionType': 'git'}, {'status': 'affected', 'version': 'e5811b8c09df9bc80eabc95339fceded23f16289', 'lessThan': '1a418ad0e5e525d1d117dd1601681f75455af320', 'versionType': 'git'}, {'status': 'affected', 'version': 'e5811b8c09df9bc80eabc95339fceded23f16289', 'lessThan': '08e57d014ea19f303d5d57a849beb846f37788b7', 'versionType': 'git'}, {'status': 'affected', 'version': 'e5811b8c09df9bc80eabc95339fceded23f16289', 'lessThan': '3884976f87448e269908ae61bd5d62d54ce9c0c7', 'versionType': 'git'}, {'status': 'affected', 'version': 'e5811b8c09df9bc80eabc95339fceded23f16289', 'lessThan': '580844a9683afe7974856dd5b7886447435b3474', 'versionType': 'git'}, {'status': 'affected', 'version': 'e5811b8c09df9bc80eabc95339fceded23f16289', 'lessThan': 'd930276f2cddd0b7294cac7a8fe7b877f6d9e08d', 'versionType': 'git'}], 'programFiles': ['drivers/net/ethernet/broadcom/bnxt/bnxt.c'], 'defaultStatus': 'unaffected'}, {'repo': 'https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git', 'vendor': 'Linux', 'product': 'Linux', 'versions': [{'status': 'affected', 'version': '4.17'}, {'status': 'unaffected', 'version': '0', 'lessThan': '4.17', 'versionType': 'semver'}, {'status': 'unaffected', 'version': '5.15.210', 'versionType': 'semver', 'lessThanOrEqual': '5.15.*'}, {'status': 'unaffected', 'version': '6.1.176', 'versionType': 'semver', 'lessThanOrEqual': '6.1.*'}, {'status': 'unaffected', 'version': '6.6.143', 'versionType': 'semver', 'lessThanOrEqual': '6.6.*'}, {'status': 'unaffected', 'version': '6.12.94', 'versionType': 'semver', 'lessThanOrEqual': '6.12.*'}, {'status': 'unaffected', 'version': '6.18.36', 'versionType': 'semver', 'lessThanOrEqual': '6.18.*'}, {'status': 'unaffected', 'version': '7.0.13', 'versionType': 'semver', 'lessThanOrEqual': '7.0.*'}, {'status': 'unaffected', 'version': '7.1', 'versionType': 'original_commit_for_fix', 'lessThanOrEqual': '*'}], 'programFiles': ['drivers/net/ethernet/broadcom/bnxt/bnxt.c'], 'defaultStatus': 'affected'}] [{'repo': 'https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git', 'vendor': 'Linux', 'product': 'Linux', 'versions': [{'status': 'affected', 'version': 'e5811b8c09df9bc80eabc95339fceded23f16289', 'lessThan': '1449177b87f768353909e930a99b902675119b2b', 'versionType': 'git'}, {'status': 'affected', 'version': 'e5811b8c09df9bc80eabc95339fceded23f16289', 'lessThan': '964b1c3eb71afe58bb61c8b984164447e000ae8a', 'versionType': 'git'}, {'status': 'affected', 'version': 'e5811b8c09df9bc80eabc95339fceded23f16289', 'lessThan': '59c5a3e69c7630a811565937e64be70b08436761', 'versionType': 'git'}, {'status': 'affected', 'version': 'e5811b8c09df9bc80eabc95339fceded23f16289', 'lessThan': '1a418ad0e5e525d1d117dd1601681f75455af320', 'versionType': 'git'}, {'status': 'affected', 'version': 'e5811b8c09df9bc80eabc95339fceded23f16289', 'lessThan': '08e57d014ea19f303d5d57a849beb846f37788b7', 'versionType': 'git'}, {'status': 'affected', 'version': 'e5811b8c09df9bc80eabc95339fceded23f16289', 'lessThan': '3884976f87448e269908ae61bd5d62d54ce9c0c7', 'versionType': 'git'}, {'status': 'affected', 'version': 'e5811b8c09df9bc80eabc95339fceded23f16289', 'lessThan': '580844a9683afe7974856dd5b7886447435b3474', 'versionType': 'git'}, {'status': 'affected', 'version': 'e5811b8c09df9bc80eabc95339fceded23f16289', 'lessThan': 'd930276f2cddd0b7294cac7a8fe7b877f6d9e08d', 'versionType': 'git'}], 'programFiles': ['drivers/net/ethernet/broadcom/bnxt/bnxt.c'], 'defaultStatus': 'unaffected'}, {'repo': 'https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git', 'vendor': 'Linux', 'product': 'Linux', 'versions': [{'status': 'affected', 'version': '4.17'}, {'status': 'unaffected', 'version': '0', 'lessThan': '4.17', 'versionType': 'semver'}, {'status': 'unaffected', 'version': '5.10.260', 'versionType': 'semver', 'lessThanOrEqual': '5.10.*'}, {'status': 'unaffected', 'version': '5.15.210', 'versionType': 'semver', 'lessThanOrEqual': '5.15.*'}, {'status': 'unaffected', 'version': '6.1.176', 'versionType': 'semver', 'lessThanOrEqual': '6.1.*'}, {'status': 'unaffected', 'version': '6.6.143', 'versionType': 'semver', 'lessThanOrEqual': '6.6.*'}, {'status': 'unaffected', 'version': '6.12.94', 'versionType': 'semver', 'lessThanOrEqual': '6.12.*'}, {'status': 'unaffected', 'version': '6.18.36', 'versionType': 'semver', 'lessThanOrEqual': '6.18.*'}, {'status': 'unaffected', 'version': '7.0.13', 'versionType': 'semver', 'lessThanOrEqual': '7.0.*'}, {'status': 'unaffected', 'version': '7.1', 'versionType': 'original_commit_for_fix', 'lessThanOrEqual': '*'}], 'programFiles': ['drivers/net/ethernet/broadcom/bnxt/bnxt.c'], 'defaultStatus': 'affected'}] -
New CVE Received by 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Jun. 25, 2026
Action Type Old Value New Value Added Affected [{'repo': 'https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git', 'vendor': 'Linux', 'product': 'Linux', 'versions': [{'status': 'affected', 'version': 'e5811b8c09df9bc80eabc95339fceded23f16289', 'lessThan': '964b1c3eb71afe58bb61c8b984164447e000ae8a', 'versionType': 'git'}, {'status': 'affected', 'version': 'e5811b8c09df9bc80eabc95339fceded23f16289', 'lessThan': '59c5a3e69c7630a811565937e64be70b08436761', 'versionType': 'git'}, {'status': 'affected', 'version': 'e5811b8c09df9bc80eabc95339fceded23f16289', 'lessThan': '1a418ad0e5e525d1d117dd1601681f75455af320', 'versionType': 'git'}, {'status': 'affected', 'version': 'e5811b8c09df9bc80eabc95339fceded23f16289', 'lessThan': '08e57d014ea19f303d5d57a849beb846f37788b7', 'versionType': 'git'}, {'status': 'affected', 'version': 'e5811b8c09df9bc80eabc95339fceded23f16289', 'lessThan': '3884976f87448e269908ae61bd5d62d54ce9c0c7', 'versionType': 'git'}, {'status': 'affected', 'version': 'e5811b8c09df9bc80eabc95339fceded23f16289', 'lessThan': '580844a9683afe7974856dd5b7886447435b3474', 'versionType': 'git'}, {'status': 'affected', 'version': 'e5811b8c09df9bc80eabc95339fceded23f16289', 'lessThan': 'd930276f2cddd0b7294cac7a8fe7b877f6d9e08d', 'versionType': 'git'}], 'programFiles': ['drivers/net/ethernet/broadcom/bnxt/bnxt.c'], 'defaultStatus': 'unaffected'}, {'repo': 'https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git', 'vendor': 'Linux', 'product': 'Linux', 'versions': [{'status': 'affected', 'version': '4.17'}, {'status': 'unaffected', 'version': '0', 'lessThan': '4.17', 'versionType': 'semver'}, {'status': 'unaffected', 'version': '5.15.210', 'versionType': 'semver', 'lessThanOrEqual': '5.15.*'}, {'status': 'unaffected', 'version': '6.1.176', 'versionType': 'semver', 'lessThanOrEqual': '6.1.*'}, {'status': 'unaffected', 'version': '6.6.143', 'versionType': 'semver', 'lessThanOrEqual': '6.6.*'}, {'status': 'unaffected', 'version': '6.12.94', 'versionType': 'semver', 'lessThanOrEqual': '6.12.*'}, {'status': 'unaffected', 'version': '6.18.36', 'versionType': 'semver', 'lessThanOrEqual': '6.18.*'}, {'status': 'unaffected', 'version': '7.0.13', 'versionType': 'semver', 'lessThanOrEqual': '7.0.*'}, {'status': 'unaffected', 'version': '7.1', 'versionType': 'original_commit_for_fix', 'lessThanOrEqual': '*'}], 'programFiles': ['drivers/net/ethernet/broadcom/bnxt/bnxt.c'], 'defaultStatus': 'affected'}] Added Description In the Linux kernel, the following vulnerability has been resolved: bnxt_en: Fix NULL pointer dereference PCIe errors detected by a Root Port or Downstream Port cause error recovery services to run on all subordinate devices regardless of administrative state. The .error_detected() callback, bnxt_io_error_detected(), disables and synchronizes IRQs via bnxt_disable_int_sync(), which calls bnxt_cp_num_to_irq_num() to map completion rings to IRQs using bp->bnapi. Since bp->bnapi is allocated on NIC open and freed on NIC close, PCIe error recovery on a closed NIC can dereference a NULL pointer. Check if bp->bnapi is NULL before disabling and synchronizing IRQs. Added Reference https://git.kernel.org/stable/c/08e57d014ea19f303d5d57a849beb846f37788b7 Added Reference https://git.kernel.org/stable/c/1a418ad0e5e525d1d117dd1601681f75455af320 Added Reference https://git.kernel.org/stable/c/3884976f87448e269908ae61bd5d62d54ce9c0c7 Added Reference https://git.kernel.org/stable/c/580844a9683afe7974856dd5b7886447435b3474 Added Reference https://git.kernel.org/stable/c/59c5a3e69c7630a811565937e64be70b08436761 Added Reference https://git.kernel.org/stable/c/964b1c3eb71afe58bb61c8b984164447e000ae8a Added Reference https://git.kernel.org/stable/c/d930276f2cddd0b7294cac7a8fe7b877f6d9e08d
EPSS is a daily estimate of the probability of exploitation activity
being observed over the next 30 days. Following chart shows the EPSS
score history of the vulnerability.