CVE-2026-80998
Linux · Kernel
A flaw in the Linux kernel bnxt driver causes a TX queue stall when SW USO exits early, potentially leading to a denial of service condition.
Executive summary
A vulnerability in the Linux kernel bnxt driver allows for a denial of service condition via a TX queue stall, which can impact network availability.
Vulnerability
The vulnerability is a logic error in the bnxt network driver where the driver fails to ring the hardware doorbell when the software UDP GSO (USO) path exits early. This results in the network interface controller failing to process transmitted packets, causing the transmission queue to stall indefinitely.
Business impact
A successful trigger of this vulnerability results in a denial of service for the affected network interface. This impacts system availability, which can lead to significant operational disruption in high-traffic environments relying on the bnxt driver. Given the CVSS score of 7.5, this high-severity flaw represents a notable risk to infrastructure stability.
Remediation
Immediate Action: Upgrade the Linux kernel to version 7.2.4 or later to apply the necessary fix for the bnxt driver.
Proactive Monitoring: Monitor system logs for netdev TX watchdog timeouts or kernel warnings related to transmission queue stalls.
Compensating Controls: If an immediate kernel update is not feasible, consider implementing rate-limiting on network traffic to reduce the likelihood of triggering early exits in the USO path.
Exploitation status
Public Exploit Available: Unknown
Analyst recommendation
The stability of the network subsystem is critical to overall system health. Administrators should prioritize patching the Linux kernel to version 7.2.4 to resolve this transmission queue stall issue. Failure to address this could lead to unexpected network outages during periods of high load.
More Linux CVEs all →
History
CVE Brief tracked this CVE 1 day before it had a CVSS score.
- Disclosed CVE record published
- Collected by CVE Brief No CVSS score yet; tracked as early warning
- CVSS score assigned 7.5 (3.1)
- Analyst report written