In the Linux kernel, the following vulnerability has been resolved:
eth: bnxt: do not update checksum in bnxt_xdp_build_skb()
The bnxt_rx_pkt() updates ip_summed value at the end if checksum offload is enabled. When the XDP-MB program is attached and it returns XDP_PASS, the bnxt_xdp_build_skb() is called to update skb_shared_info. The main purpose of bnxt_xdp_build_skb() is to update skb_shared_info, but it updates ip_summed value too if checksum offload is enabled. This is actually duplicate work.
When the bnxt_rx_pkt() updates ip_summed value, it checks if ip_summed is CHECKSUM_NONE or not. It means that ip_summed should be CHECKSUM_NONE at this moment. But ip_summed may already be updated to CHECKSUM_UNNECESSARY in the XDP-MB-PASS path. So the by skb_checksum_none_assert() WARNS about it.
This is duplicate work and updating ip_summed in the bnxt_xdp_build_skb() is not needed.
Splat looks like: WARNING: CPU: 3 PID: 5782 at ./include/linux/skbuff.h:5155 bnxt_rx_pkt+0x479b/0x7610 [bnxt_en] Modules linked in: bnxt_re bnxt_en rdma_ucm rdma_cm iw_cm ib_cm ib_uverbs veth xt_nat xt_tcpudp xt_conntrack nft_chain_nat xt_MASQUERADE nf_] CPU: 3 UID: 0 PID: 5782 Comm: socat Tainted: G W 6.14.0-rc4+ #27 Tainted: [W]=WARN Hardware name: ASUS System Product Name/PRIME Z690-P D4, BIOS 0603 11/01/2021 RIP: 0010:bnxt_rx_pkt+0x479b/0x7610 [bnxt_en] Code: 54 24 0c 4c 89 f1 4c 89 ff c1 ea 1f ff d3 0f 1f 00 49 89 c6 48 85 c0 0f 84 4c e5 ff ff 48 89 c7 e8 ca 3d a0 c8 e9 8f f4 ff ff <0f> 0b f RSP: 0018:ffff88881ba09928 EFLAGS: 00010202 RAX: 0000000000000000 RBX: 00000000c7590303 RCX: 0000000000000000 RDX: 1ffff1104e7d1610 RSI: 0000000000000001 RDI: ffff8881c91300b8 RBP: ffff88881ba09b28 R08: ffff888273e8b0d0 R09: ffff888273e8b070 R10: ffff888273e8b010 R11: ffff888278b0f000 R12: ffff888273e8b080 R13: ffff8881c9130e00 R14: ffff8881505d3800 R15: ffff888273e8b000 FS: 00007f5a2e7be080(0000) GS:ffff88881ba00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007fff2e708ff8 CR3: 000000013e3b0000 CR4: 00000000007506f0 PKRU: 55555554 Call Trace: <IRQ> ? __warn+0xcd/0x2f0 ? bnxt_rx_pkt+0x479b/0x7610 ? report_bug+0x326/0x3c0 ? handle_bug+0x53/0xa0 ? exc_invalid_op+0x14/0x50 ? asm_exc_invalid_op+0x16/0x20 ? bnxt_rx_pkt+0x479b/0x7610 ? bnxt_rx_pkt+0x3e41/0x7610 ? __pfx_bnxt_rx_pkt+0x10/0x10 ? napi_complete_done+0x2cf/0x7d0 __bnxt_poll_work+0x4e8/0x1220 ? __pfx___bnxt_poll_work+0x10/0x10 ? __pfx_mark_lock.part.0+0x10/0x10 bnxt_poll_p5+0x36a/0xfa0 ? __pfx_bnxt_poll_p5+0x10/0x10 __napi_poll.constprop.0+0xa0/0x440 net_rx_action+0x899/0xd00 ...
Following ping.py patch adds xdp-mb-pass case. so ping.py is going to be able to reproduce this issue.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux-6.1Upgrade linux | Apr 14, 2025 | Apr 1, 2025 |
| Suse | — | Upgrade dlm-kmp-rtUpgrade dtb-hisiliconUpgrade kernel-default-livepatch-develUpgrade kernel-rt_debugUpgrade ocfs2-kmp-64kbUpgrade kernel-rt_debug-vdsoUpgrade cluster-md-kmp-64kbUpgrade kselftests-kmp-defaultUpgrade dtb-freescaleUpgrade dtb-amazonUpgrade kernel-64kb-optionalUpgrade kernel-symsUpgrade kernel-debugUpgrade kernel-source-rtUpgrade kernel-rt-livepatch-develUpgrade dtb-marvellUpgrade kernel-azure-vdsoUpgrade kernel-debug-develUpgrade kernel-obs-qaUpgrade kselftests-kmp-rtUpgrade kernel-rt-optionalUpgrade dtb-broadcomUpgrade kernel-azure-extraUpgrade kernel-default-baseUpgrade kernel-macrosUpgrade kernel-default-develUpgrade dtb-renesasUpgrade gfs2-kmp-defaultUpgrade kernel-default-extraUpgrade kernel-rt-vdsoUpgrade dtb-socionextUpgrade gfs2-kmp-64kbUpgrade ocfs2-kmp-azureUpgrade kernel-64kb-extraUpgrade kernel-syms-rtUpgrade dtb-amdUpgrade reiserfs-kmp-defaultUpgrade kernel-kvmsmall-vdsoUpgrade kselftests-kmp-azureUpgrade dtb-sprdUpgrade dlm-kmp-azureUpgrade kernel-64kbUpgrade kernel-docs-htmlUpgrade reiserfs-kmp-rtUpgrade dtb-appleUpgrade kernel-defaultUpgrade dlm-kmp-defaultUpgrade dtb-apmUpgrade cluster-md-kmp-defaultUpgrade dtb-amlogicUpgrade reiserfs-kmp-64kbUpgrade kernel-default-livepatchUpgrade kernel-docsUpgrade dlm-kmp-64kbUpgrade kernel-kvmsmall-develUpgrade kernel-rtUpgrade gfs2-kmp-rtUpgrade gfs2-kmp-azureUpgrade dtb-lgUpgrade kernel-azure-develUpgrade kernel-kvmsmallUpgrade reiserfs-kmp-azureUpgrade kernel-default-optionalUpgrade kernel-debug-vdsoUpgrade dtb-xilinxUpgrade kernel-rt_debug-develUpgrade kernel-devel-rtUpgrade kernel-sourceUpgrade kernel-default-base-rebuildUpgrade dtb-exynosUpgrade cluster-md-kmp-rtUpgrade dtb-allwinnerUpgrade kernel-azureUpgrade dtb-qcomUpgrade kernel-syms-azureUpgrade kernel-rt-develUpgrade kernel-develUpgrade kernel-default-vdsoUpgrade kernel-azure-optionalUpgrade cluster-md-kmp-azureUpgrade kselftests-kmp-64kbUpgrade kernel-obs-buildUpgrade kernel-source-azureUpgrade dtb-rockchipUpgrade dtb-alteraUpgrade dtb-nvidiaUpgrade kernel-zfcpdumpUpgrade kernel-rt-extraUpgrade kernel-64kb-develUpgrade kernel-source-vanillaUpgrade ocfs2-kmp-defaultUpgrade kernel-devel-azureUpgrade dtb-caviumUpgrade dtb-armUpgrade dtb-mediatekUpgrade ocfs2-kmp-rt | Dec 5, 2025 | May 21, 2025 |
| Ubuntu | — | Upgrade linux-image-azure-6.11Upgrade linux-image-raspi-realtime-6.8Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-oracle-64k-6.8Upgrade linux-image-6.8.0-1039-nvidiaUpgrade linux-image-aws-64k-6.8Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-oem-24.04bUpgrade linux-image-gcpUpgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-realtime-hwe-22.04Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-azure-nvidiaUpgrade linux-image-6.8.0-1037-oracleUpgrade linux-image-lowlatencyUpgrade linux-image-oracleUpgrade linux-image-6.11.0-28-generic-64kUpgrade linux-image-generic-64kUpgrade linux-image-kvmUpgrade linux-image-6.8.0-1039-awsUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1040-gcpUpgrade linux-image-oracle-64kUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-azure-lts-24.04Upgrade linux-image-nvidia-64kUpgrade linux-image-6.8.0-1039-nvidia-lowlatencyUpgrade linux-image-ibm-classicUpgrade linux-image-azure-fde-6.11Upgrade linux-image-azure-nvidia-6.8Upgrade linux-image-gkeop-6.8Upgrade linux-image-nvidiaUpgrade linux-image-6.11.0-1018-azureUpgrade linux-image-gcp-6.8Upgrade linux-image-6.11.0-1017-oracle-64kUpgrade linux-image-generic-lpaeUpgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-ibmUpgrade linux-image-ibm-6.8Upgrade linux-image-6.8.1-1034-realtimeUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-azure-fdeUpgrade linux-image-azure-fde-edgeUpgrade linux-image-6.8.0-1036-azureUpgrade linux-image-6.8.0-1039-raspiUpgrade linux-image-6.8.0-84-genericUpgrade linux-image-6.8.0-84-generic-64kUpgrade linux-image-6.11.0-1018-azure-fdeUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-6.11.0-1016-gcp-64kUpgrade linux-image-6.8.0-1038-azureUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-lowlatency-6.11Upgrade linux-image-6.8.0-1039-nvidia-lowlatency-64kUpgrade linux-image-oem-22.04Upgrade linux-image-6.8.0-85-genericUpgrade linux-image-6.8.0-1023-gkeopUpgrade linux-image-virtualUpgrade linux-image-6.8.0-1037-ibmUpgrade linux-image-aws-64kUpgrade linux-image-generic-64k-6.8Upgrade linux-image-6.8.0-84-lowlatency-64kUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-oem-22.04aUpgrade linux-image-6.11.0-1015-lowlatency-64kUpgrade linux-image-raspi-realtimeUpgrade linux-image-6.8.0-1025-azure-nvidiaUpgrade linux-image-generic-6.8Upgrade linux-image-azure-6.8Upgrade linux-image-oem-22.04bUpgrade linux-image-6.11.0-1011-realtimeUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.11.0-28-genericUpgrade linux-image-awsUpgrade linux-image-6.8.0-84-lowlatencyUpgrade linux-image-azure-fde-6.8Upgrade linux-image-6.8.0-1036-azure-fdeUpgrade linux-image-realtime-6.8.1Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-gcp-64k-6.8Upgrade linux-image-gkeopUpgrade linux-image-aws-6.8Upgrade linux-image-6.11.0-1024-oemUpgrade linux-image-6.11.0-1014-raspiUpgrade linux-image-6.8.0-85-generic-64kUpgrade linux-image-6.8.0-1036-gke-64kUpgrade linux-image-6.8.0-1036-gkeUpgrade linux-image-6.11.0-1015-lowlatencyUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-gke-64kUpgrade linux-image-oracle-6.8Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-azure-nvidia-lts-24.04Upgrade linux-image-6.8.0-2031-raspi-realtimeUpgrade linux-image-genericUpgrade linux-image-nvidia-6.8Upgrade linux-image-gkeUpgrade linux-image-raspi-6.8Upgrade linux-image-lowlatency-6.8Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-aws-lts-24.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.11.0-1017-oracleUpgrade linux-image-6.8.0-1037-oracle-64kUpgrade linux-image-raspiUpgrade linux-image-6.8.0-1039-nvidia-64kUpgrade linux-image-6.8.0-1040-gcp-64kUpgrade linux-image-azureUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-6.11.0-1016-gcpUpgrade linux-image-oem-22.04dUpgrade linux-image-gke-64k-6.8Upgrade linux-image-6.8.0-1038-azure-fdeUpgrade linux-image-oem-22.04cUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-lowlatency-64k-6.11Upgrade linux-image-6.8.0-1039-aws-64kUpgrade linux-image-6.11.0-1015-awsUpgrade linux-image-virtual-6.8Upgrade linux-image-realtimeUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-gke-6.8Upgrade linux-image-gcp-64k | Jun 26, 2025 | Apr 1, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 13, 2025 | Apr 1, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub