CVE-2026-72496

A flaw was found in the Linux kernel's RDMA/bnxt_re component. When the bnxt_qplib_alloc_dpi function attempts to map I/O memory (ioremap), it may not properly handle failures. This oversight could lead to system instability or a denial of service (DoS) condition, as the system might proceed with an invalid memory state.

This vulnerability is rated as Low impact for Red Hat Enterprise Linux because exploitation requires local access, the presence of Broadcom NetXtreme-E RDMA hardware, and an exceptional memory mapping failure condition. The issue resides within the RoCE driver resource initialization logic, where an unhandled failure during memory mapping may lead to local denial of service via a kernel crash. Environments not using Broadcom RoCE adapters or where the driver module is not loaded remain unaffected.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.