CVE-2026-97570

A flaw was found in the Broadcom NetXtreme-E (bnxt_en) driver in the Linux kernel. Due to improper bounds checking when mapping firmware Transparent Packet Aggregation (TPA) identifiers, software aggregation IDs can exceed the allocated memory for receive structures. During packet reception, this issue causes the driver to perform an out-of-bounds memory access. An attacker capable of sending network traffic to the affected system can trigger this flaw to crash the kernel, resulting in a Denial of Service (DoS).

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.