{"id":21331,"date":"2026-09-12T04:31:02","date_gmt":"2026-09-11T20:31:02","guid":{"rendered":"https:\/\/www.54iter.cn\/?vuln=cve-2026-80998"},"modified":"2026-09-12T04:31:02","modified_gmt":"2026-09-11T20:31:02","slug":"cve-2026-80998","status":"publish","type":"vuln","link":"https:\/\/www.54iter.cn\/?vuln=cve-2026-80998","title":{"rendered":"CVE-2026-80998 &#8211; In the Linux kernel, the following vulnerability has been resolved:\n\nnet: bnxt: ring the d"},"content":{"rendered":"<p>In the Linux kernel, the following vulnerability has been resolved:<\/p>\n<p>net: bnxt: ring the doorbell when SW USO exits early<\/p>\n<p>When a burst of packets is handed down to the driver, the driver defers<br \/>\nthe doorbell to the end by setting txr-&gt;kick_pending = 1. The normal TX<br \/>\npath handles this, but the SW USO path can miss it if it returns<br \/>\nearly.<\/p>\n<p>If bnxt_sw_udp_gso_xmit runs but returns early with NETDEV_TX_BUSY and<br \/>\ntxr-&gt;kick_pending was previously set to 1, then the TX queue can<br \/>\nstall because the driver wrote some BDs but never wrote the doorbell.<br \/>\nThe device won&#8217;t know to do the TX which would generate the completion<br \/>\nthat would wake the queue back up.<\/p>\n<p>Simplify bnxt_sw_udp_gso_xmit to set txr-&gt;kick_pending in its success<br \/>\ncase and check the flag on return. The added check after<br \/>\nbnxt_sw_udp_gso_xmit returns ensures that any pending doorbells are<br \/>\nwritten handling both successful USO and any early returns, which<br \/>\nprevents the TX queue stall mentioned above.<\/p>\n<p>This TX queue stall was observed on a production system with a netdev TX<br \/>\nwatchdog informing about the queue stall.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>In the Linux kernel, the following vulnerability has been resolved:<\/p>\n<p>net: bnxt: ring the doorbell when SW USO exits early<\/p>\n<p>When a burst of packets is handed down to the driver, the driver defers<br \/>\nthe d<\/p>\n","protected":false},"template":"","meta":[],"categories":[],"tags":[],"class_list":["post-21331","vuln","type-vuln","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=\/wp\/v2\/vuln\/21331","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=\/wp\/v2\/vuln"}],"about":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=\/wp\/v2\/types\/vuln"}],"wp:attachment":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=21331"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.54iter.cn\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=21331"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.54iter.cn\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=21331"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}