CVE-2026-53177

MEDIUM
MEDIUM Priority: 0.01 BB Relevance: 36/100
Published: 2026-06-25 Modified: 2026-11-06 First seen: 2026-11-06 Status: active

Attack Surface

Low Complexity No Interaction

CVSS Vector Breakdown

AV: Local
AC: Low
PR: Low
UI: None
S: Unchanged
C: None
I: None
A: High

Description

In the Linux kernel, the following vulnerability has been resolved: bnxt_en: Fix NULL pointer dereference PCIe errors detected by a Root Port or Downstream Port cause error recovery services to run on all subordinate devices regardless of administrative state. The .error_detected() callback, bnxt_io_error_detected(), disables and synchronizes IRQs via bnxt_disable_int_sync(), which calls bnxt_cp_num_to_irq_num() to map completion rings to IRQs using bp->bnapi. Since bp->bnapi is allocated on NIC open and freed on NIC close, PCIe error recovery on a closed NIC can dereference a NULL pointer. Check if bp->bnapi is NULL before disabling and synchronizing IRQs.

Weakness Classification (1)

Affected Software (17)

VendorProductVersion
Linux Linux e5811b8c09df9bc80eabc95339fceded23f16289 < 1449177b87f768353909e930a99b902675119b2b
Linux Linux e5811b8c09df9bc80eabc95339fceded23f16289 < 964b1c3eb71afe58bb61c8b984164447e000ae8a
Linux Linux e5811b8c09df9bc80eabc95339fceded23f16289 < 59c5a3e69c7630a811565937e64be70b08436761
Linux Linux e5811b8c09df9bc80eabc95339fceded23f16289 < 1a418ad0e5e525d1d117dd1601681f75455af320
Linux Linux e5811b8c09df9bc80eabc95339fceded23f16289 < 08e57d014ea19f303d5d57a849beb846f37788b7
Linux Linux e5811b8c09df9bc80eabc95339fceded23f16289 < 3884976f87448e269908ae61bd5d62d54ce9c0c7
Linux Linux e5811b8c09df9bc80eabc95339fceded23f16289 < 580844a9683afe7974856dd5b7886447435b3474
Linux Linux e5811b8c09df9bc80eabc95339fceded23f16289 < d930276f2cddd0b7294cac7a8fe7b877f6d9e08d
Linux Linux 4.17
linux linux_kernel 4.17 – 5.15.210
linux linux_kernel 7.1
linux linux_kernel 7.1
linux linux_kernel 7.1
linux linux_kernel 7.1
linux linux_kernel 7.1
linux linux_kernel 7.1
linux linux_kernel 7.1

Bug Bounty Relevance

36 / 100
✓ Low complexity
✓ No user interaction

CVSS Score

5.5 / 10.0 v3.1
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

EPSS — Exploitation Probability

0.12%
Raw Score 0.001250
Percentile 2.3%
Date 2026-11-13

EPSS Trend

2026-11-13
0.00125
2026-11-12
0.00125
2026-11-10
0.00125
2026-11-09
0.00125
2026-11-08
0.00125
2026-11-07
0.00125
2026-11-06
0.00125

Intelligence Sources

mitre ref →
nvd ref →