CVE-2026-98356

A flaw was found in the Linux kernel's Broadcom NetXtreme (bnxt_re) driver. During device initialization, the driver fails to verify that memory allocation for the Data Center Bridging (DCB) workqueue succeeded. Under low-memory conditions where this setup fails, a subsequent asynchronous DCB configuration event can attempt to access the unallocated queue, triggering a null pointer dereference and resulting in a system crash and Denial of Service (DoS).

This vulnerability is rated as Low severity for Red Hat because exploitation requires access to systems equipped with specific Broadcom NetXtreme hardware and depends on an uncommon memory allocation failure. The bnxt_re driver is only utilized when RoCE or RDMA functionality is actively configured on supported adapters, significantly limiting exposure on standard environments. Furthermore, triggering the denial of service requires an asynchronous event to occur following the initial initialization failure, making intentional exploitation difficult.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.