In the Linux kernel, the following vulnerability has been resolved: bnxt_en: Handle partially initialized auxiliary devices bnxt_aux_devices_init() calls auxiliary_device_init() before all fields used by bnxt_aux_dev_release() are initialized. After auxiliary_device_init() succeeds, later errors must unwind with auxiliary_device_uninit(), which invokes the release callback. The release callback assumes that aux_priv->id, aux_priv->edev, edev->net and edev->ulp_tbl are all populated. If allocation fails after auxiliary_device_init(), the release path can otherwise dereference or clear partially initialized state. Allocate and attach the bnxt_en_dev and ULP table before calling auxiliary_device_init(), so the release callback only sees a fully initialized auxiliary private object. If auxiliary_device_init() itself fails, free those allocations directly because device_initialize() has not run and the release callback will not be invoked. This issue was found by a static analysis checker and confirmed by manual source review.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - bnxt_en: Handle partially initialized auxiliary devices bnxt_aux_devices_init() calls     auxiliary_device_init() before all fields used by bnxt_aux_dev_release() are initialized. After     auxiliary_device_init() succeeds, later errors must unwind with auxiliary_device_uninit(), which invokes     the release callback. The release callback assumes that aux_priv->id, aux_priv->edev, edev->net and     edev->ulp_tbl are all populated. If allocation fails after auxiliary_device_init(), the release path can     otherwise dereference or clear partially initialized state. Allocate and attach the bnxt_en_dev and ULP     table before calling auxiliary_device_init(), so the release callback only sees a fully initialized     auxiliary private object. If auxiliary_device_init() itself fails, free those allocations directly because     device_initialize() has not run and the release callback will not be invoked. This issue was found by a     static analysis checker and confirmed by manual source review. (CVE-2026-68375)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Type	Severity
365768	Ubuntu 26.04 LTS : Linux kernel (Azure) vulnerabilities (USN-8888-1)	Nessus	Ubuntu Local Security Checks	Local	medium
365767	Ubuntu 26.04 LTS : Linux kernel vulnerabilities (USN-8887-1)	Nessus	Ubuntu Local Security Checks	Local	medium
365463	Ubuntu 26.04 LTS : Linux kernel (OEM) vulnerabilities (USN-8889-1)	Nessus	Ubuntu Local Security Checks	Local	medium
350138	openSUSE 16: cluster-md-kmp-64kb / cluster-md-kmp-azure / cluster-md-kmp-default / etc (openSUSE-SU-2026:21910-1)	Nessus	SuSE Local Security Checks	Local	high
347900	SUSE SLED15 / SLES15 : Security update for the Linux Kernel (SUSE-SU-2026:4254-1)	Nessus	SuSE Local Security Checks	Local	high
334311	Linux Distros Unpatched Vulnerability : CVE-2026-68375	Nessus	Misc.	Local	medium

Detections

Analytics

CVE-2026-68375

medium

Tenable Plugins

medium

medium

medium

high

high

medium