CVE-2026-72498

A flaw was found in the Linux kernel's RDMA/bnxt_re component. This vulnerability occurs when a user dumps information about a Memory Region (MR) using the rdma tool, inadvertently exposing a kernel pointer. The exposure of this pointer, mr_hwq, could provide an attacker with sensitive details about the system's memory layout. Such information might be used to facilitate more advanced attacks.

This vulnerability is rated as Moderate severity because it exposes kernel memory layout information to local users without directly allowing privilege escalation or code execution. Exploitation requires local system access and is restricted to configurations utilizing Broadcom NetXtreme-E adapters with RDMA over Converged Ethernet (RoCE) active. While the revealed pointer may assist an attacker in bypassing Kernel Address Space Layout Randomization (KASLR), it cannot be used alone to modify kernel state or disrupt system availability.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.