CVE-2026-97573

A flaw was found in the Linux kernel's Broadcom NetXtreme-E (bnxt_en) network driver. The driver fails to verify memory allocation success during receive ring buffer resets, ignoring failure responses when memory is low. A local user or network event that triggers a reset under memory exhaustion can cause the driver to supply uninitialized Direct Memory Access (DMA) addresses to the network device, resulting in a system crash and a Denial of Service (DoS).

This vulnerability is evaluated as having a Moderate severity impact for Red Hat Enterprise Linux because exploitation requires physical or virtual systems equipped with Broadcom NetXtreme network adapters operating under acute memory pressure. Environments lacking this specific network hardware are unaffected. Additionally, triggering the failure path requires severe memory exhaustion during receive ring reconfiguration, restricting the realistic threat to a localized denial of service rather than code execution.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.