https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 07:21:55 +0000 https://cve.radiocsirt.org/vuln/cve-2026-80998 <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>net: bnxt: ring the doorbell when SW USO exits early</p> <p>When a burst of packets is handed down to the driver, the driver defers the doorbell to the end by setting txr-&gt;kick_pending = 1. The normal TX path handles this, but the SW USO path can miss it if it returns early.</p> <p>If bnxt_sw_udp_gso_xmit runs but returns early with NETDEV_TX_BUSY and txr-&gt;kick_pending was previously set to 1, then the TX queue can stall because the driver wrote some BDs but never wrote the doorbell. The device won&#39;t know to do the TX which would generate the completion that would wake the queue back up.</p> <p>Simplify bnxt_sw_udp_gso_xmit to set txr-&gt;kick_pending in its success case and check the flag on return. The added check after bnxt_sw_udp_gso_xmit returns ensures that any pending doorbells are written handling both successful USO and any early returns, which prevents the TX queue stall mentioned above.</p> <p>This TX queue stall was observed on a production system with a netdev TX watchdog informing about the queue stall.</p> <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>net: bnxt: ring the doorbell when SW USO exits early</p> <p>When a burst of packets is handed down to the driver, the driver defers the doorbell to the end by setting txr-&gt;kick_pending = 1. The normal TX path handles this, but the SW USO path can miss it if it returns early.</p> <p>If bnxt_sw_udp_gso_xmit runs but returns early with NETDEV_TX_BUSY and txr-&gt;kick_pending was previously set to 1, then the TX queue can stall because the driver wrote some BDs but never wrote the doorbell. The device won&#39;t know to do the TX which would generate the completion that would wake the queue back up.</p> <p>Simplify bnxt_sw_udp_gso_xmit to set txr-&gt;kick_pending in its success case and check the flag on return. The added check after bnxt_sw_udp_gso_xmit returns ensures that any pending doorbells are written handling both successful USO and any early returns, which prevents the TX queue stall mentioned above.</p> <p>This TX queue stall was observed on a production system with a netdev TX watchdog informing about the queue stall.</p> https://cve.radiocsirt.org/vuln/cve-2026-80998