---
id: CVE-2026-72496
title: |-
  In the Linux kernel, the following vulnerability has been resolved:

  RDMA/bnxt_re: Proper rollback if the ioremap fails

  bnxt_qplib_alloc_dpi returns success even if ioremap fails.
  Add the proper rollback when the ioremap fails and retur…
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  RDMA/bnxt_re: Proper rollback if the ioremap fails

  bnxt_qplib_alloc_dpi returns success even if ioremap fails.
  Add the proper rollback when the ioremap fails and retur…
severity: critical
cvss: 9.2
cvssVector: 'CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:L/I:H/A:H'
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= 0ac20faf5d837b59fb4c041ea320932ed47fd67f <
    3c69ff7f4a761e18ce8abfa0c98e12097b39adaa
  - >-
    Linux >= 0ac20faf5d837b59fb4c041ea320932ed47fd67f <
    f956477c343aa73e9d9c8d6ebf32efac7cd4f4e2
  - >-
    Linux >= 0ac20faf5d837b59fb4c041ea320932ed47fd67f <
    303f6fef95df5e5316970746d861cf6daeeca77f
  - >-
    Linux >= 0ac20faf5d837b59fb4c041ea320932ed47fd67f <
    87267803a8c824616eb147c5dad7030a5db6f878
  - Linux 6.5
published: '2026-08-15'
updated: '2026-09-21'
sourceUpdated: '2026-09-21T14:17:18.053'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-72496'
references:
  - url: 'https://git.kernel.org/stable/c/303f6fef95df5e5316970746d861cf6daeeca77f'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/3c69ff7f4a761e18ce8abfa0c98e12097b39adaa'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/87267803a8c824616eb147c5dad7030a5db6f878'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/f956477c343aa73e9d9c8d6ebf32efac7cd4f4e2'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
tags:
  - nvd
  - cve.org
epss: 0.00189
epssPercentile: 0.076
ingestedAt: '2026-09-21T13:37:22.841Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

RDMA/bnxt_re: Proper rollback if the ioremap fails

bnxt_qplib_alloc_dpi returns success even if ioremap fails.
Add the proper rollback when the ioremap fails and return
-ENOMEM status.

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.