CVE-2026-99081

A flaw was found in the Linux kernel's Broadcom NetXtreme-E (bnxt_en) network driver, which can lead to a Denial of Service (DoS). When transmitting small network packets that require padding, the driver fails to update the Direct Memory Access (DMA) mapping length to account for the padded size. As a result, the network controller can read beyond the mapped memory buffer into unmapped memory, triggering an Input-Output Memory Management Unit (IOMMU) fault. An attacker capable of generating or transmitting small network packets across affected interfaces can exploit this vulnerability to trigger transmit queue timeouts and disrupt network connectivity.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.