SECURITY ANNOUNCEMENT

CVE-2026-99081

23 October 2026

carrying less than 10 bytes of UDP payload (small gso_size, or a short last segment) is sent as a frame shorter than BNXT_MIN_PKT_SIZE. This is a separate issue, left for a followup patch.

Introduced

4.4c0c050c58d840994ba842ad1c338a98e7c12b764

Fixed releases

6.12.1132956aca14dd2977cd08bd2ccafae3beb8b84b268

6.18.57fbd977e513971ccb4f0762a7f59eac500e474f89

6.6.160cf8530a25ae92c4493e2f22981ecb46f0b66f4c8

7.2.115213f65a9667d3dd85db2e6df8f2e0516290db34

7.3a51d233ccd4889aadb71dace863525cc2b00271e

View source announcement ↗