# CVE-2026-89582

## Summary

- **CVE ID:** CVE-2026-89582
- **Severity:** UNKNOWN
- **CVSS Score:** 0
- **CWE:** N/A
- **Published:** Sep 11, 2026
- **Last Modified:** Sep 16, 2026

## Description

In the Linux kernel, the following vulnerability has been resolved:

bnx2x: fix double free in bnx2x_init_firmware() error path

bnx2x_init_firmware() frees bp->init_ops, bp->init_data and
bp->init_ops_offsets in its error path without setting them to NULL.
The cleanup function bnx2x_release_firmware() frees the same three
pointers unconditionally, so if init_firmware fails and
release_firmware is later called (e.g. from __bnx2x_remove or through
the function state machine), all three are freed a second time.

Set each pointer to NULL after kfree() in the error path so that the
subsequent kfree(NULL) in bnx2x_release_firmware() is a safe no-op.

## Affected Products

- Linux — Linux (94a78b79cb5f14c09a42522738d6694c6a1cdd20)
- Linux — Linux (2.6.31)
- Linux — Linux (0)
- Linux — Linux (6.12.109)
- Linux — Linux (6.18.50)
- Linux — Linux (7.2.4)
- Linux — Linux (7.3-rc1)
- Linux — Linux (5.10.270)
- Linux — Linux (5.15.221)
- Linux — Linux (6.1.188)
- Linux — Linux (6.6.157)

## References

- [CNA](https://git.kernel.org/stable/c/dc98e727b9cfc5e19c796bf893878153f00b222b)
- [CNA](https://git.kernel.org/stable/c/4d36e38e48340a1ccf92a98c7a22d07a954e5aa3)
- [CNA](https://git.kernel.org/stable/c/a142c024f07d623e2b6b25943f6c36d4b6b0b4c6)
- [CNA](https://git.kernel.org/stable/c/d2796ffe38cb4155afe0eab23636295b096c27a5)
- [CNA](https://git.kernel.org/stable/c/770715784b689749014ce193ef986b706fe8f51c)
- [CNA](https://git.kernel.org/stable/c/c44e5d6c3189241d5f791bc7b1eddde6b92f802c)
- [CNA](https://git.kernel.org/stable/c/07d4516e3eb1fcde4a5db29eb556cdb0ebba6265)
- [CNA](https://git.kernel.org/stable/c/ac280f6872e75df49f3004505bcddff91d9e5362)

## Exploitation Prediction (EPSS)

- **EPSS Score:** 0.18%
- **EPSS Percentile:** 7.4

---
_Exported from OnDuty AI Vulnerability Intelligence on 2026-09-18._