In the Linux kernel, the following vulnerability has been resolved:
ethtool: fail closed if we can't get max channel used in indirection tables
Commit 0d1b7d6c9274 ("bnxt: fix crashes when reducing ring count with active RSS contexts") proves that allowing indirection table to contain channels with out of bounds IDs may lead to crashes. Currently the max channel check in the core gets skipped if driver can't fetch the indirection table or when we can't allocate memory.
Both of those conditions should be extremely rare but if they do happen we should try to be safe and fail the channel change.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | May 15, 2025 | Sep 27, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-tools-libsUpgrade kernelUpgrade python3-perfUpgrade bpftoolUpgrade kernel-toolsUpgrade kernel-abi-stablelists | Dec 12, 2024 | Sep 27, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade python3-perfUpgrade kernelUpgrade bpftoolUpgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade kernel-tools | Dec 12, 2024 | Sep 27, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Sep 27, 2024 |
| Suse | — | Upgrade kselftests-kmp-azureUpgrade ocfs2-kmp-defaultUpgrade kernel-sourceUpgrade dtb-lgUpgrade kernel-rt-vdsoUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-64kbUpgrade kernel-rt_debug-develUpgrade kernel-default-livepatchUpgrade kernel-obs-buildUpgrade dtb-marvellUpgrade kernel-syms-azureUpgrade kernel-kvmsmall-vdsoUpgrade kernel-source-azureUpgrade kernel-azure-extraUpgrade kernel-develUpgrade kernel-default-optionalUpgrade kernel-source-vanillaUpgrade kernel-azureUpgrade kernel-rtUpgrade dtb-appleUpgrade reiserfs-kmp-defaultUpgrade ocfs2-kmp-azureUpgrade ocfs2-kmp-64kbUpgrade kernel-debug-vdsoUpgrade cluster-md-kmp-64kbUpgrade reiserfs-kmp-64kbUpgrade dtb-broadcomUpgrade dtb-freescaleUpgrade dtb-allwinnerUpgrade kernel-64kb-extraUpgrade kernel-default-develUpgrade dlm-kmp-rtUpgrade kernel-rt-extraUpgrade kselftests-kmp-64kbUpgrade dlm-kmp-64kbUpgrade dtb-exynosUpgrade cluster-md-kmp-rtUpgrade dtb-xilinxUpgrade kernel-rt-optionalUpgrade kernel-64kb-optionalUpgrade kernel-azure-optionalUpgrade kernel-docs-htmlUpgrade kernel-default-vdsoUpgrade dtb-sprdUpgrade kernel-source-rtUpgrade cluster-md-kmp-azureUpgrade gfs2-kmp-azureUpgrade dtb-amazonUpgrade kernel-rt-livepatchUpgrade dtb-alteraUpgrade dtb-caviumUpgrade dtb-qcomUpgrade dtb-renesasUpgrade gfs2-kmp-defaultUpgrade kernel-default-base-rebuildUpgrade kernel-azure-livepatch-develUpgrade dtb-nvidiaUpgrade kernel-kvmsmall-develUpgrade dtb-mediatekUpgrade gfs2-kmp-64kbUpgrade kernel-devel-rtUpgrade kernel-rt_debugUpgrade kernel-docsUpgrade kernel-azure-vdsoUpgrade kernel-64kb-develUpgrade dtb-amdUpgrade kernel-kvmsmallUpgrade dtb-apmUpgrade kselftests-kmp-rtUpgrade kernel-syms-rtUpgrade dtb-rockchipUpgrade dlm-kmp-defaultUpgrade kselftests-kmp-defaultUpgrade kernel-symsUpgrade kernel-debug-develUpgrade kernel-azure-develUpgrade kernel-debugUpgrade kernel-obs-qaUpgrade kernel-devel-azureUpgrade cluster-md-kmp-defaultUpgrade ocfs2-kmp-rtUpgrade kernel-rt-livepatch-develUpgrade kernel-default-manUpgrade kernel-rt-develUpgrade kernel-default-livepatch-develUpgrade kernel-default-extraUpgrade dtb-hisiliconUpgrade dtb-armUpgrade kernel-default-baseUpgrade kernel-zfcpdumpUpgrade dtb-socionextUpgrade kernel-defaultUpgrade reiserfs-kmp-rtUpgrade reiserfs-kmp-azureUpgrade kernel-rt_debug-vdsoUpgrade kernel-macrosUpgrade gfs2-kmp-rtUpgrade dlm-kmp-azureUpgrade dtb-amlogic | Dec 5, 2025 | Nov 13, 2024 |
| Ubuntu | — | Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-6.8.0-1020-azure-fdeUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-oem-22.04bUpgrade linux-image-6.8.0-1017-oracle-64kUpgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-oracleUpgrade linux-image-6.8.0-1019-gcpUpgrade linux-image-awsUpgrade linux-image-6.8.0-50-genericUpgrade linux-image-azure-fdeUpgrade linux-image-6.8.0-1020-awsUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-6.8.0-1017-oracleUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-kvmUpgrade linux-image-6.8.0-1016-raspiUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-ibm-classicUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-virtualUpgrade linux-image-oem-22.04dUpgrade linux-image-6.8.0-50-lowlatencyUpgrade linux-image-6.8.0-50-lowlatency-64kUpgrade linux-image-6.8.0-1019-nvidiaUpgrade linux-image-6.8.0-1018-oemUpgrade linux-image-6.8.0-1017-ibmUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-raspiUpgrade linux-image-nvidia-6.8Upgrade linux-image-generic-64kUpgrade linux-image-6.8.0-1020-azureUpgrade linux-image-6.8.0-1019-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1019-nvidia-lowlatencyUpgrade linux-image-6.8.0-1002-gkeopUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-6.8.0-1019-nvidia-64kUpgrade linux-image-oem-22.04aUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-gkeopUpgrade linux-image-6.8.0-1015-gkeUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-lowlatencyUpgrade linux-image-oem-24.04Upgrade linux-image-gkeop-6.8Upgrade linux-image-nvidiaUpgrade linux-image-gkeUpgrade linux-image-genericUpgrade linux-image-gcpUpgrade linux-image-ibmUpgrade linux-image-generic-lpaeUpgrade linux-image-oem-24.04aUpgrade linux-image-oem-22.04cUpgrade linux-image-nvidia-64kUpgrade linux-image-6.8.0-50-generic-64kUpgrade linux-image-oracle-64kUpgrade linux-image-azureUpgrade linux-image-oem-22.04 | Dec 13, 2024 | Sep 27, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Sep 27, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub