The bnxt_en network driver in the Linux kernel contains an error‑handling flaw: when bnxt_alloc_one_rx_ring() fails, its error return is ignored by bnxt_init_nic(), which then enables Transparent Packet Acceleration (TPA) using partially zeroed rx_tpa[] entries. This can result in a zeroed DMA address being used for packet aggregation, leading to driver crashes or loss of network interface functionality. No direct data confidentiality or integrity impact is cited, but the instability manifests as a denial of service to network traffic.

The flaw is present in the Linux kernel's bnxt_en driver and affects all Linux distributions that ship with a kernel version prior to the patch. Every vendor that includes this driver in its standard kernel build is potentially exposed until the update is applied.

The CVSS score of 5.5 and the EPSS score of <1% indicate moderate severity and low likelihood of exploitation. The vulnerability is not listed in CISA's KEV catalog. No evidence of remote exploitation is provided. Based on the description, it is inferred that an attacker can trigger the failure by causing the driver to allocate uninitialized rings, a local action such as restarting the bnxt_en driver or rebooting the system, leading to a denial of service. The overall risk remains moderate.