CVE-2026-43034

A flaw was found in the bnxt_en driver within the Linux kernel. This vulnerability arises from the bnxt_hwrm_func_backing_store_qcaps_v2() function using an incorrect type value from the firmware response to index internal data arrays. This improper indexing could lead to memory corruption, potentially causing system instability or a Denial of Service (DoS).

This vulnerability is rated as Moderate severity because it requires local system access on hardware equipped with Broadcom NetXtreme adapters, with the blast radius limited to memory corruption and denial of service without compromising system confidentiality or integrity. In Red Hat environments, exposure is restricted strictly to systems where the bnxt_en driver is loaded and active. Deployments that do not utilize Broadcom NetXtreme network controllers are unaffected.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.