In the Linux kernel, the following vulnerability has been resolved: bnx2x: fix double free in bnx2x_init_firmware() error path bnx2x_init_firmware()… (CVE-2026-89582)
A double free vulnerability in the Linux kernel's bnx2x driver was resolved by ensuring pointers are set to NULL after being freed in the error path of bnx2x_init_firmware(). This prevents a second free operation when bnx2x_release_firmware() is called later. The issue could lead to unsafe memory operations but has been fixed by the patch.
AI Analysis
Technical Summary
The vulnerability in the Linux kernel's bnx2x driver involves a double free condition in the error path of the bnx2x_init_firmware() function. Specifically, bp->init_ops, bp->init_data, and bp->init_ops_offsets pointers are freed without being set to NULL. Later, the cleanup function bnx2x_release_firmware() unconditionally frees these pointers again, causing a double free. The fix sets these pointers to NULL after freeing them in the error path, making subsequent frees safe no-ops.
Potential Impact
Double free vulnerabilities can lead to undefined behavior including memory corruption, potential kernel crashes, or escalation of privileges. However, no known exploits in the wild have been reported for this issue. The fix prevents unsafe memory operations by ensuring pointers are nullified after free.
Mitigation Recommendations
A fix has been implemented to set pointers to NULL after freeing them in the error path of bnx2x_init_firmware(). Users should apply the official Linux kernel update that includes this patch to remediate the vulnerability.
In the Linux kernel, the following vulnerability has been resolved: bnx2x: fix double free in bnx2x_init_firmware() error path bnx2x_init_firmware()… (CVE-2026-89582)
Description
A double free vulnerability in the Linux kernel's bnx2x driver was resolved by ensuring pointers are set to NULL after being freed in the error path of bnx2x_init_firmware(). This prevents a second free operation when bnx2x_release_firmware() is called later. The issue could lead to unsafe memory operations but has been fixed by the patch.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
The vulnerability in the Linux kernel's bnx2x driver involves a double free condition in the error path of the bnx2x_init_firmware() function. Specifically, bp->init_ops, bp->init_data, and bp->init_ops_offsets pointers are freed without being set to NULL. Later, the cleanup function bnx2x_release_firmware() unconditionally frees these pointers again, causing a double free. The fix sets these pointers to NULL after freeing them in the error path, making subsequent frees safe no-ops.
Potential Impact
Double free vulnerabilities can lead to undefined behavior including memory corruption, potential kernel crashes, or escalation of privileges. However, no known exploits in the wild have been reported for this issue. The fix prevents unsafe memory operations by ensuring pointers are nullified after free.
Mitigation Recommendations
A fix has been implemented to set pointers to NULL after freeing them in the error path of bnx2x_init_firmware(). Users should apply the official Linux kernel update that includes this patch to remediate the vulnerability.
Technical Details
- Gcve Source
- db.gcve.eu
- Osv Id
- GHSA-gw39-5689-xrvh
- Osv Schema Version
- 1.4.0
- Aliases
- ["CVE-2026-89582"]
Threat ID: 6aa4a00c55bf5e2cf5a8667f
Added to database: 09/12/2026, 00:42:52 UTC
Last enriched: 09/12/2026, 01:03:29 UTC
Last updated: 09/12/2026, 01:03:29 UTC
Views: 2
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.