In the Linux kernel, the following vulnerability has been resolved:
bnxt_en: Avoid order-5 memory allocation for TPA data
The driver needs to keep track of all the possible concurrent TPA (GRO/LRO) completions on the aggregation ring. On P5 chips, the maximum number of concurrent TPA is 256 and the amount of memory we allocate is order-5 on systems using 4K pages. Memory allocation failure has been reported:
NetworkManager: page allocation failure: order:5, mode:0x40dc0(GFP_KERNEL|__GFP_COMP|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 CPU: 15 PID: 2995 Comm: NetworkManager Kdump: loaded Not tainted 5.10.156 #1 Hardware name: Dell Inc. PowerEdge R660/0M1CC5, BIOS 0.2.25 08/12/2022 Call Trace: dump_stack+0x57/0x6e warn_alloc.cold.120+0x7b/0xdd ? _cond_resched+0x15/0x30 ? __alloc_pages_direct_compact+0x15f/0x170 __alloc_pages_slowpath.constprop.108+0xc58/0xc70 __alloc_pages_nodemask+0x2d0/0x300 kmalloc_order+0x24/0xe0 kmalloc_order_trace+0x19/0x80 bnxt_alloc_mem+0x1150/0x15c0 [bnxt_en] ? bnxt_get_func_stat_ctxs+0x13/0x60 [bnxt_en] __bnxt_open_nic+0x12e/0x780 [bnxt_en] bnxt_open+0x10b/0x240 [bnxt_en] __dev_open+0xe9/0x180 __dev_change_flags+0x1af/0x220 dev_change_flags+0x21/0x60 do_setlink+0x35c/0x1100
Instead of allocating this big chunk of memory and dividing it up for the concurrent TPA instances, allocate each small chunk separately for each TPA instance. This will reduce it to order-0 allocations.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-livepatch-5.10.176-157.645Upgrade bpftool-debuginfoUpgrade python-perfUpgrade kernel-toolsUpgrade python-perf-debuginfoUpgrade kernel-headersUpgrade kernel-debuginfoUpgrade perf-debuginfoUpgrade bpftoolUpgrade kernel-tools-debuginfoUpgrade kernel-develUpgrade kernelUpgrade kernel-tools-develUpgrade perfUpgrade kernel-debuginfo-common-aarch64 | May 20, 2026 | May 20, 2026 |
| Debian | — | Upgrade linux | May 5, 2025 | May 2, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade kernel-tools-libsUpgrade kernelUpgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade bpftoolUpgrade kernel-tools | Aug 13, 2025 | Aug 9, 2025 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rtNo solution exists | Jul 9, 2025 | May 2, 2025 |
| Ubuntu | — | Upgrade linux-aws-fipsUpgrade linux-raspi-5.4Upgrade linux-nvidiaUpgrade linux-riscv-5.15Upgrade linux-gcpUpgrade linux-azure-5.15Upgrade linux-ibm-5.15Upgrade linux-intel-iotgUpgrade linux-fipsUpgrade linux-xilinx-zynqmpUpgrade linux-oracleUpgrade linux-lowlatency-hwe-5.15Upgrade linux-nvidia-tegra-igxUpgrade linux-gcp-5.15Upgrade linux-hwe-5.4Upgrade linux-bluefieldUpgrade linux-intel-iot-realtimeUpgrade linux-realtimeUpgrade linux-gkeUpgrade linux-oracle-5.4Upgrade linux-nvidia-tegraUpgrade linux-oracle-5.15Upgrade linux-kvmUpgrade linux-intel-iotg-5.15Upgrade linux-ibmUpgrade linux-aws-5.15Upgrade linux-gcp-fipsUpgrade linux-nvidia-tegra-5.15Upgrade linux-hwe-5.15Upgrade linux-gcp-5.4Upgrade linux-iotUpgrade linuxUpgrade linux-gkeopUpgrade linux-azureUpgrade linux-azure-5.4Upgrade linux-aws-5.4Upgrade linux-awsUpgrade linux-raspiUpgrade linux-azure-fipsUpgrade linux-ibm-5.4Upgrade linux-lowlatency | May 8, 2025 | May 2, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | May 27, 2026 | May 2, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub