In the Linux kernel, the following vulnerability has been resolved:
RDMA/bnxt_re: Fix out of bound check
Driver exports pacing stats only on GenP5 and P7 adapters. But while parsing the pacing stats, driver has a check for "rdev->dbr_pacing". This caused a trace when KASAN is enabled.
BUG: KASAN: slab-out-of-bounds in bnxt_re_get_hw_stats+0x2b6a/0x2e00 [bnxt_re] Write of size 8 at addr ffff8885942a6340 by task modprobe/4809
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 27, 2026 | Jul 27, 2026 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Nov 7, 2024 |
| Ubuntu | — | Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-6.8.0-1026-nvidia-64kUpgrade linux-image-6.8.0-1028-gcp-64kUpgrade linux-image-oem-22.04dUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-awsUpgrade linux-image-gcp-64kUpgrade linux-image-6.11.0-1009-awsUpgrade linux-image-6.8.0-1023-gkeUpgrade linux-image-oem-24.04aUpgrade linux-image-6.8.0-1010-gkeopUpgrade linux-image-6.11.0-1010-lowlatencyUpgrade linux-image-6.8.0-1026-oemUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.8.0-1027-azure-fdeUpgrade linux-image-oem-24.04Upgrade linux-image-azureUpgrade linux-image-6.11.0-18-genericUpgrade linux-image-raspiUpgrade linux-image-oracle-64kUpgrade linux-image-oem-22.04cUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-realtime-hwe-24.04Upgrade linux-image-nvidia-64kUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-nvidia-6.8Upgrade linux-image-6.11.0-1015-oemUpgrade linux-image-6.8.0-58-genericUpgrade linux-image-oem-22.04bUpgrade linux-image-gkeUpgrade linux-image-kvmUpgrade linux-image-realtimeUpgrade linux-image-6.11.0-1008-raspiUpgrade linux-image-6.8.0-1024-ibmUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-aws-lts-24.04Upgrade linux-image-6.8.0-1027-azureUpgrade linux-image-6.11.0-1010-lowlatency-64kUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.8.0-1024-oracleUpgrade linux-image-6.8.0-58-generic-64kUpgrade linux-image-gcpUpgrade linux-image-azure-fdeUpgrade linux-image-6.8.0-1027-awsUpgrade linux-image-6.11.0-18-generic-64kUpgrade linux-image-6.11.0-1005-realtimeUpgrade linux-image-nvidiaUpgrade linux-image-azure-lts-24.04Upgrade linux-image-6.8.0-1024-oracle-64kUpgrade linux-image-6.11.0-1011-oracleUpgrade linux-image-raspi-realtimeUpgrade linux-image-lowlatency-64kUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-6.11.0-1011-oracle-64kUpgrade linux-image-6.11.0-1009-azure-fdeUpgrade linux-image-oem-22.04Upgrade linux-image-6.8.0-58-lowlatencyUpgrade linux-image-6.8.0-2023-raspi-realtimeUpgrade linux-image-6.8.0-1014-azure-nvidiaUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-azure-nvidiaUpgrade linux-image-6.8.0-1028-raspiUpgrade linux-image-gkeop-6.8Upgrade linux-image-oracleUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-generic-lpaeUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-6.8.0-58-lowlatency-64kUpgrade linux-image-6.8.0-1026-nvidia-lowlatencyUpgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-ibmUpgrade linux-image-6.8.0-1026-nvidiaUpgrade linux-image-6.8.1-1020-realtimeUpgrade linux-image-ibm-classicUpgrade linux-image-gkeopUpgrade linux-image-lowlatencyUpgrade linux-image-6.11.0-1009-gcpUpgrade linux-image-virtualUpgrade linux-image-6.8.0-1026-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1028-gcpUpgrade linux-image-6.11.0-1009-azureUpgrade linux-image-generic-64kUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-oem-22.04aUpgrade linux-image-oem-24.04bUpgrade linux-image-generic | Feb 20, 2025 | Nov 7, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub