In the Linux kernel, the following vulnerability has been resolved:
bnxt: avoid overflow in bnxt_get_nvram_directory()
The value of an arithmetic expression is subject of possible overflow due to a failure to cast operands to a larger data type before performing arithmetic. Used macro for multiplication instead operator for avoiding overflow.
Found by Security Code and Linux Verification Center (linuxtesting.org) with SVACE.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Oct 9, 2025 | Oct 9, 2025 |
| Huawei Euleros 2_0_sp11 | — | Upgrade bpftoolUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-toolsUpgrade python3-perfUpgrade kernel-abi-stablelists | Mar 17, 2026 | Mar 17, 2026 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernelUpgrade kernel-tools-libsUpgrade bpftoolUpgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade kernel-tools | Jan 15, 2026 | Jan 6, 2026 |
| Huawei Euleros 2_0_sp13 | — | Upgrade kernel-toolsUpgrade bpftoolUpgrade python3-perfUpgrade kernelUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libs | Dec 12, 2025 | Dec 11, 2025 |
| Redhat_linux | — | Upgrade kernelNo solution existsUpgrade kernel-rt | Nov 14, 2025 | Oct 7, 2025 |
| Ubuntu | — | Upgrade linux-azure-fde-5.15Upgrade linux-oracle-5.15Upgrade linux-ibmUpgrade linux-raspiUpgrade linux-lowlatencyUpgrade linux-hwe-5.15Upgrade linux-azure-5.15Upgrade linux-nvidiaUpgrade linux-gkeopUpgrade linux-gkeUpgrade linux-nvidia-tegraUpgrade linuxUpgrade linux-xilinx-zynqmpUpgrade linux-nvidia-tegra-igxUpgrade linux-oracleUpgrade linux-ibm-5.15Upgrade linux-aws-5.15Upgrade linux-intel-iotg-5.15Upgrade linux-realtimeUpgrade linux-gcpUpgrade linux-intel-iot-realtimeUpgrade linux-azureUpgrade linux-intel-iotgUpgrade linux-bluefieldUpgrade linux-riscv-5.15Upgrade linux-nvidia-tegra-5.15Upgrade linux-lowlatency-hwe-5.15Upgrade linux-awsUpgrade linux-gcp-5.15Upgrade linux-kvm | Oct 10, 2025 | Oct 7, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub