In the Linux kernel, the following vulnerability has been resolved:
bnxt_en: Mask the bd_cnt field in the TX BD properly
The bd_cnt field in the TX BD specifies the total number of BDs for the TX packet. The bd_cnt field has 5 bits and the maximum number supported is 32 with the value 0.
CONFIG_MAX_SKB_FRAGS can be modified and the total number of SKB fragments can approach or exceed the maximum supported by the chip. Add a macro to properly mask the bd_cnt field so that the value 32 will be properly masked and set to 0 in the bd_cnd field.
Without this patch, the out-of-range bd_cnt value will corrupt the TX BD and may cause TX timeout.
The next patch will check for values exceeding 32.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade python3-perf6.12Upgrade kernel-toolsUpgrade kernel-libbpf-staticUpgrade kernel-develUpgrade bpftoolUpgrade bpftool-debuginfoUpgrade kernel-libbpf-develUpgrade perf6.12Upgrade kernel6.12-debuginfoUpgrade kernel-tools-debuginfoUpgrade python3-perf6.12-debuginfoUpgrade kernel6.12-debuginfo-common-x86_64Upgrade kernel-tools-develUpgrade perf6.12-debuginfoUpgrade kernel-livepatch-6.12.29-33.102Upgrade kernel6.12-modules-extraUpgrade kernel6.12-debuginfo-common-aarch64Upgrade kernel-libbpf-debuginfoUpgrade kernel6.12Upgrade kernel-modules-extra-commonUpgrade kernel-headersUpgrade kernel-libbpf | Jun 3, 2025 | Apr 16, 2025 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Apr 16, 2025 |
| Suse | — | Upgrade dtb-lgUpgrade dtb-alteraUpgrade dtb-qcomUpgrade cluster-md-kmp-rtUpgrade kernel-debug-vdsoUpgrade kernel-rtUpgrade kernel-default-optionalUpgrade kernel-rt-develUpgrade kernel-source-azureUpgrade kernel-macrosUpgrade kernel-default-base-rebuildUpgrade kernel-develUpgrade kernel-azure-develUpgrade kernel-azure-optionalUpgrade kernel-source-vanillaUpgrade kernel-obs-buildUpgrade dtb-amlogicUpgrade gfs2-kmp-azureUpgrade kernel-obs-qaUpgrade dtb-armUpgrade dtb-sprdUpgrade gfs2-kmp-rtUpgrade dlm-kmp-64kbUpgrade dtb-rockchipUpgrade kernel-kvmsmallUpgrade kernel-devel-rtUpgrade kernel-sourceUpgrade kernel-devel-azureUpgrade kselftests-kmp-64kbUpgrade kernel-default-extraUpgrade dtb-apmUpgrade dtb-xilinxUpgrade dtb-exynosUpgrade kernel-kvmsmall-develUpgrade kernel-default-vdsoUpgrade dtb-mediatekUpgrade kernel-azureUpgrade kernel-rt-vdsoUpgrade kernel-syms-azureUpgrade kernel-rt-extraUpgrade reiserfs-kmp-azureUpgrade dtb-caviumUpgrade dtb-nvidiaUpgrade kernel-64kb-develUpgrade dlm-kmp-azureUpgrade reiserfs-kmp-defaultUpgrade kernel-rt_debugUpgrade dtb-broadcomUpgrade ocfs2-kmp-defaultUpgrade kernel-rt-livepatch-develUpgrade kernel-debugUpgrade kernel-azure-extraUpgrade kernel-64kb-extraUpgrade dtb-renesasUpgrade dtb-freescaleUpgrade dlm-kmp-rtUpgrade dlm-kmp-defaultUpgrade kernel-symsUpgrade kernel-rt_debug-vdsoUpgrade kernel-docsUpgrade dtb-amazonUpgrade reiserfs-kmp-rtUpgrade ocfs2-kmp-azureUpgrade kselftests-kmp-defaultUpgrade kernel-syms-rtUpgrade kernel-default-livepatchUpgrade dtb-allwinnerUpgrade reiserfs-kmp-64kbUpgrade dtb-amdUpgrade gfs2-kmp-defaultUpgrade dtb-marvellUpgrade cluster-md-kmp-64kbUpgrade ocfs2-kmp-rtUpgrade kernel-64kbUpgrade kselftests-kmp-azureUpgrade gfs2-kmp-64kbUpgrade kernel-zfcpdumpUpgrade kernel-kvmsmall-vdsoUpgrade kernel-docs-htmlUpgrade kernel-default-livepatch-develUpgrade kernel-default-baseUpgrade kernel-64kb-optionalUpgrade kernel-source-rtUpgrade cluster-md-kmp-azureUpgrade ocfs2-kmp-64kbUpgrade kselftests-kmp-rtUpgrade kernel-defaultUpgrade kernel-debug-develUpgrade dtb-appleUpgrade dtb-socionextUpgrade kernel-rt-optionalUpgrade kernel-default-develUpgrade kernel-azure-vdsoUpgrade kernel-rt_debug-develUpgrade dtb-hisiliconUpgrade cluster-md-kmp-default | Dec 5, 2025 | May 21, 2025 |
| Ubuntu | — | Upgrade linux-image-6.14.0-1007-aws-64kUpgrade linux-image-azure-fdeUpgrade linux-image-6.8.0-1035-nvidia-tegraUpgrade linux-image-nvidia-tegra-rt-6.8Upgrade linux-image-raspiUpgrade linux-image-6.14.0-1007-raspiUpgrade linux-image-azureUpgrade linux-image-6.14.0-1008-gcpUpgrade linux-image-6.14.0-22-genericUpgrade linux-image-oracle-64kUpgrade linux-image-gcpUpgrade linux-image-oracleUpgrade linux-image-6.14.0-1007-azureUpgrade linux-image-awsUpgrade linux-image-6.14.0-1007-awsUpgrade linux-image-nvidia-tegra-6.8Upgrade linux-image-6.14.0-1007-oracle-64kUpgrade linux-image-6.14.0-1007-oracleUpgrade linux-image-6.14.0-1004-realtimeUpgrade linux-image-6.14.0-1008-gcp-64kUpgrade linux-image-generic-64kUpgrade linux-image-aws-64kUpgrade linux-image-6.14.0-22-generic-64kUpgrade linux-image-6.14.0-1007-azure-fdeUpgrade linux-image-gcp-64kUpgrade linux-image-nvidia-tegraUpgrade linux-image-genericUpgrade linux-image-realtimeUpgrade linux-image-6.8.0-1035-nvidia-tegra-rtUpgrade linux-image-nvidia-tegra-rt | Jun 26, 2025 | Apr 16, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Sep 21, 2026 | Apr 16, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub