CVE-2026-93277

A flaw was found in the Linux kernel's Broadcom NetXtreme-E Remote Direct Memory Access (RDMA) driver (bnxt_re). During resource teardown, internal driver resources are released before userspace data access is validated. If userspace memory access fails during this operation, the kernel preserves the user object, permitting the destroy routine to be triggered again on already-freed resources. A local user could exploit this flaw to trigger a use-after-free condition, resulting in a system crash and Denial of Service (DoS) or potential memory corruption.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.