Linux bnxt_re RoCE driver (chip context memory leak): Memory leak in the Broadcom RoCE driver when doorbell BAR mapping

Impact

Memory leak in the Broadcom RoCE driver when doorbell BAR mapping fails. Low severity on its own, but doorbell-BAR mapping is the mechanism that gives a userspace RDMA process direct hardware access, and leaks in its error path are worth tracking on a fabric where that mapping is the tenant boundary.

Who can reach it

Local, via repeated RDMA device setup failures.

What to do

Kernel/driver upgrade plus host reboot; bundle with the other bnxt_re fixes rather than scheduling separately.

References

Related entries

• Linux kernel (drivers/net/ethernet/mellanox/mlx5/core): When the driver runs out of firmware command slots, the workCVE-2025-21662 · Linux kernel (drivers/net/ethernet/mellanox/mlx5/core)Medium
• Linux kernel (drivers/infiniband/hw/mlx5): Memory-region deregistration hangs forever on the flagship AI-cluster NIC. ACVE-2025-21886 · Linux kernel (drivers/infiniband/hw/mlx5)Medium
• Linux kernel (drivers/infiniband/hw/mlx5): The memory-registration engine on the primary AI-cluster NIC wedgesCVE-2025-21892 · Linux kernel (drivers/infiniband/hw/mlx5)Medium
• Linux i915 GPU kernel driver (HuC firmware load): The HuC delayed-loading fence is not released when probe fails earlyCVE-2025-37754 · Linux i915 GPU kernel driver (HuC firmware load)Medium
• ASPEED LPC snoop driver (drivers/soc/aspeed/aspeed-lpc-snoop.c): Under memory pressure an allocation in the LPC snoopCVE-2025-38145 · ASPEED LPC snoop driver (drivers/soc/aspeed/aspeed-lpc-snoop.c)Medium
• Linux kernel (drivers/infiniband/hw/mlx5): Memory-region deregistration self-deadlocks under memory pressure. AnCVE-2025-38373 · Linux kernel (drivers/infiniband/hw/mlx5)Medium