In the Linux kernel, the following vulnerability has been resolved:
bnxt_en: Avoid order-5 memory allocation for TPA data
The driver needs to keep track of all the possible concurrent TPA (GRO/LRO) completions on the aggregation ring. On P5 chips, the maximum number of concurrent TPA is 256 and the amount of memory we allocate is order-5 on systems using 4K pages. Memory allocation failure has been reported:
NetworkManager: page allocation failure: order:5, mode:0x40dc0(GFP_KERNEL|__GFP_COMP|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 CPU: 15 PID: 2995 Comm: NetworkManager Kdump: loaded Not tainted 5.10.156 #1 Hardware name: Dell Inc. PowerEdge R660/0M1CC5, BIOS 0.2.25 08/12/2022 Call Trace: dump_stack+0x57/0x6e warn_alloc.cold.120+0x7b/0xdd ? _cond_resched+0x15/0x30 ? __alloc_pages_direct_compact+0x15f/0x170 __alloc_pages_slowpath.constprop.108+0xc58/0xc70 __alloc_pages_nodemask+0x2d0/0x300 kmalloc_order+0x24/0xe0 kmalloc_order_trace+0x19/0x80 bnxt_alloc_mem+0x1150/0x15c0 [bnxt_en] ? bnxt_get_func_stat_ctxs+0x13/0x60 [bnxt_en] __bnxt_open_nic+0x12e/0x780 [bnxt_en] bnxt_open+0x10b/0x240 [bnxt_en] __dev_open+0xe9/0x180 __dev_change_flags+0x1af/0x220 dev_change_flags+0x21/0x60 do_setlink+0x35c/0x1100
Instead of allocating this big chunk of memory and dividing it up for the concurrent TPA instances, allocate each small chunk separately for each TPA instance. This will reduce it to order-0 allocations.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade perf-debuginfoUpgrade kernelUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-headersUpgrade bpftoolUpgrade kernel-tools-develUpgrade kernel-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-develUpgrade perfUpgrade bpftool-debuginfoUpgrade python-perf-debuginfoUpgrade kernel-livepatch-5.10.176-157.645Upgrade python-perfUpgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64 | May 20, 2026 | May 20, 2026 |
| Debian | — | Upgrade linux | May 5, 2025 | May 2, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade kernel-toolsUpgrade bpftoolUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-abi-stablelists | Aug 13, 2025 | Aug 9, 2025 |
| Redhat_linux | — | Upgrade kernel-rtNo solution existsUpgrade kernel | Jul 9, 2025 | May 2, 2025 |
| Ubuntu | — | Upgrade linux-gkeopUpgrade linux-azure-fipsUpgrade linux-nvidia-tegra-5.15Upgrade linux-hwe-5.15Upgrade linux-gcp-fipsUpgrade linux-aws-5.4Upgrade linux-azureUpgrade linux-lowlatencyUpgrade linux-aws-5.15Upgrade linuxUpgrade linux-azure-5.4Upgrade linux-gcp-5.4Upgrade linux-raspiUpgrade linux-iotUpgrade linux-ibm-5.4Upgrade linux-awsUpgrade linux-intel-iotg-5.15Upgrade linux-ibmUpgrade linux-nvidiaUpgrade linux-nvidia-tegra-igxUpgrade linux-gcp-5.15Upgrade linux-nvidia-tegraUpgrade linux-ibm-5.15Upgrade linux-riscv-5.15Upgrade linux-hwe-5.4Upgrade linux-oracleUpgrade linux-gkeUpgrade linux-kvmUpgrade linux-gcpUpgrade linux-xilinx-zynqmpUpgrade linux-intel-iot-realtimeUpgrade linux-raspi-5.4Upgrade linux-intel-iotgUpgrade linux-fipsUpgrade linux-azure-5.15Upgrade linux-aws-fipsUpgrade linux-bluefieldUpgrade linux-realtimeUpgrade linux-lowlatency-hwe-5.15Upgrade linux-oracle-5.4Upgrade linux-oracle-5.15 | May 8, 2025 | May 2, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | May 27, 2026 | May 2, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub