In the Linux kernel, the following vulnerability has been resolved:
bnxt_en: Avoid order-5 memory allocation for TPA data
The driver needs to keep track of all the possible concurrent TPA (GRO/LRO) completions on the aggregation ring. On P5 chips, the maximum number of concurrent TPA is 256 and the amount of memory we allocate is order-5 on systems using 4K pages. Memory allocation failure has been reported:
NetworkManager: page allocation failure: order:5, mode:0x40dc0(GFP_KERNEL|__GFP_COMP|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 CPU: 15 PID: 2995 Comm: NetworkManager Kdump: loaded Not tainted 5.10.156 #1 Hardware name: Dell Inc. PowerEdge R660/0M1CC5, BIOS 0.2.25 08/12/2022 Call Trace: dump_stack+0x57/0x6e warn_alloc.cold.120+0x7b/0xdd ? _cond_resched+0x15/0x30 ? __alloc_pages_direct_compact+0x15f/0x170 __alloc_pages_slowpath.constprop.108+0xc58/0xc70 __alloc_pages_nodemask+0x2d0/0x300 kmalloc_order+0x24/0xe0 kmalloc_order_trace+0x19/0x80 bnxt_alloc_mem+0x1150/0x15c0 [bnxt_en] ? bnxt_get_func_stat_ctxs+0x13/0x60 [bnxt_en] __bnxt_open_nic+0x12e/0x780 [bnxt_en] bnxt_open+0x10b/0x240 [bnxt_en] __dev_open+0xe9/0x180 __dev_change_flags+0x1af/0x220 dev_change_flags+0x21/0x60 do_setlink+0x35c/0x1100
Instead of allocating this big chunk of memory and dividing it up for the concurrent TPA instances, allocate each small chunk separately for each TPA instance. This will reduce it to order-0 allocations.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade python-perfUpgrade kernel-toolsUpgrade python-perf-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-livepatch-5.10.176-157.645Upgrade perf-debuginfoUpgrade bpftoolUpgrade kernel-develUpgrade kernel-tools-develUpgrade kernel-debuginfoUpgrade kernelUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-headersUpgrade perfUpgrade kernel-tools-debuginfo | May 20, 2026 | May 20, 2026 |
| Debian | — | Upgrade linux | May 5, 2025 | May 2, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade kernelUpgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade bpftoolUpgrade python3-perfUpgrade kernel-tools | Aug 13, 2025 | Aug 9, 2025 |
| Redhat_linux | — | No solution existsUpgrade kernel-rtUpgrade kernel | Jul 9, 2025 | May 2, 2025 |
| Ubuntu | — | Upgrade linux-raspiUpgrade linux-azureUpgrade linux-lowlatencyUpgrade linux-ibm-5.4Upgrade linux-iotUpgrade linuxUpgrade linux-gcp-5.4Upgrade linux-aws-5.15Upgrade linux-nvidia-tegra-5.15Upgrade linux-aws-5.4Upgrade linux-azure-fipsUpgrade linux-gkeopUpgrade linux-hwe-5.15Upgrade linux-gcp-fipsUpgrade linux-awsUpgrade linux-azure-5.4Upgrade linux-lowlatency-hwe-5.15Upgrade linux-nvidia-tegra-igxUpgrade linux-oracle-5.15Upgrade linux-oracle-5.4Upgrade linux-nvidia-tegraUpgrade linux-intel-iotgUpgrade linux-xilinx-zynqmpUpgrade linux-intel-iotg-5.15Upgrade linux-fipsUpgrade linux-ibm-5.15Upgrade linux-azure-5.15Upgrade linux-gcpUpgrade linux-aws-fipsUpgrade linux-ibmUpgrade linux-intel-iot-realtimeUpgrade linux-raspi-5.4Upgrade linux-nvidiaUpgrade linux-riscv-5.15Upgrade linux-bluefieldUpgrade linux-oracleUpgrade linux-hwe-5.4Upgrade linux-realtimeUpgrade linux-kvmUpgrade linux-gkeUpgrade linux-gcp-5.15 | May 8, 2025 | May 2, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | May 27, 2026 | May 2, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub