SEPTEMBER 19, 2026
Live Feed
Back to database
Case File

CVE-2026-72497

HIGH · CVSS 8.8 EPSS 0.12%

Source: NVD + CISA KEV + EPSS · Published 2026-08-15 · Last synced 2026-09-14

CyberRota Analysis

AI-Generated

The vulnerability in the Linux kernel affects the RDMA/bnxt_re component, where insufficient validation of the Work Queue Element (WQE) mode allows user-supplied values to exceed the hardware's maximum limit of 64K slots. This could potentially lead to denial-of-service conditions or other unpredictable behavior in systems utilizing RDMA. Organizations leveraging Linux systems with RDMA capabilities should prioritize patching this issue to mitigate associated risks.

CVE
CVE-2026-72497
Severity
HIGH
CVSS
8.8
EPSS
0.12%
Linux

Original NVD Description

In the Linux kernel, the following vulnerability has been resolved: RDMA/bnxt_re: Add a max slot check for SQ The variable WQE mode must be validated against the maximum slots supported by HW. The max supported value is 64K. Adding a max and min check and fail if user supplied value is more than the max supported and zero.