In the Linux kernel, the following vulnerability has been resolved:
bnxt_en: Mask the bd_cnt field in the TX BD properly
The bd_cnt field in the TX BD specifies the total number of BDs for the TX packet. The bd_cnt field has 5 bits and the maximum number supported is 32 with the value 0.
CONFIG_MAX_SKB_FRAGS can be modified and the total number of SKB fragments can approach or exceed the maximum supported by the chip. Add a macro to properly mask the bd_cnt field so that the value 32 will be properly masked and set to 0 in the bd_cnd field.
Without this patch, the out-of-range bd_cnt value will corrupt the TX BD and may cause TX timeout.
The next patch will check for values exceeding 32.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade kernel6.12-modules-extraUpgrade kernel-libbpf-debuginfoUpgrade kernel-headersUpgrade kernel6.12-debuginfo-common-aarch64Upgrade kernel-modules-extra-commonUpgrade kernel6.12Upgrade perf6.12-debuginfoUpgrade kernel-libbpfUpgrade kernel6.12-debuginfo-common-x86_64Upgrade kernel-tools-develUpgrade kernel-livepatch-6.12.29-33.102Upgrade kernel-libbpf-staticUpgrade bpftool-debuginfoUpgrade python3-perf6.12-debuginfoUpgrade kernel-tools-debuginfoUpgrade bpftoolUpgrade kernel-develUpgrade python3-perf6.12Upgrade perf6.12Upgrade kernel6.12-debuginfoUpgrade kernel-libbpf-develUpgrade kernel-tools | Jun 3, 2025 | Apr 16, 2025 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Apr 16, 2025 |
| Suse | — | Upgrade dtb-alteraUpgrade dtb-lgUpgrade dtb-qcomUpgrade kernel-sourceUpgrade kselftests-kmp-64kbUpgrade kernel-kvmsmallUpgrade dtb-xilinxUpgrade kernel-develUpgrade kernel-azure-develUpgrade kernel-default-optionalUpgrade kernel-azureUpgrade kernel-default-base-rebuildUpgrade kernel-macrosUpgrade kernel-devel-azureUpgrade kernel-kvmsmall-develUpgrade dtb-rockchipUpgrade kernel-devel-rtUpgrade gfs2-kmp-azureUpgrade kernel-obs-qaUpgrade dtb-armUpgrade kernel-azure-optionalUpgrade kernel-obs-buildUpgrade kernel-rt-develUpgrade kernel-source-vanillaUpgrade dtb-nvidiaUpgrade kernel-rt-vdsoUpgrade reiserfs-kmp-azureUpgrade kernel-rt-extraUpgrade dtb-caviumUpgrade gfs2-kmp-rtUpgrade kernel-rtUpgrade dtb-amlogicUpgrade dtb-exynosUpgrade dlm-kmp-64kbUpgrade kernel-source-azureUpgrade cluster-md-kmp-rtUpgrade dtb-sprdUpgrade dtb-mediatekUpgrade dtb-apmUpgrade kernel-debug-vdsoUpgrade kernel-default-extraUpgrade kernel-default-vdsoUpgrade kernel-syms-azureUpgrade kernel-64kbUpgrade gfs2-kmp-defaultUpgrade dtb-broadcomUpgrade dlm-kmp-defaultUpgrade kernel-64kb-extraUpgrade kernel-default-livepatchUpgrade ocfs2-kmp-rtUpgrade dtb-allwinnerUpgrade reiserfs-kmp-64kbUpgrade kselftests-kmp-azureUpgrade dtb-marvellUpgrade cluster-md-kmp-64kbUpgrade kernel-syms-rtUpgrade ocfs2-kmp-defaultUpgrade kernel-kvmsmall-vdsoUpgrade kernel-docs-htmlUpgrade kernel-default-livepatch-develUpgrade kernel-default-baseUpgrade kernel-64kb-optionalUpgrade gfs2-kmp-64kbUpgrade dtb-amdUpgrade kernel-zfcpdumpUpgrade kernel-rt-livepatch-develUpgrade kselftests-kmp-rtUpgrade kernel-rt-optionalUpgrade kernel-defaultUpgrade kernel-debug-develUpgrade dtb-socionextUpgrade dtb-appleUpgrade cluster-md-kmp-azureUpgrade ocfs2-kmp-64kbUpgrade reiserfs-kmp-defaultUpgrade kernel-rt_debugUpgrade kernel-debugUpgrade kernel-azure-extraUpgrade dtb-renesasUpgrade dtb-freescaleUpgrade kernel-source-rtUpgrade cluster-md-kmp-defaultUpgrade dtb-hisiliconUpgrade kernel-azure-vdsoUpgrade kernel-default-develUpgrade dlm-kmp-azureUpgrade kernel-rt_debug-develUpgrade dtb-amazonUpgrade reiserfs-kmp-rtUpgrade ocfs2-kmp-azureUpgrade kselftests-kmp-defaultUpgrade kernel-docsUpgrade kernel-64kb-develUpgrade kernel-rt_debug-vdsoUpgrade kernel-symsUpgrade dlm-kmp-rt | Dec 5, 2025 | May 21, 2025 |
| Ubuntu | — | Upgrade linux-image-gcp-64kUpgrade linux-image-6.14.0-1007-oracleUpgrade linux-image-6.14.0-1007-oracle-64kUpgrade linux-image-aws-64kUpgrade linux-image-6.14.0-1007-azure-fdeUpgrade linux-image-6.14.0-1004-realtimeUpgrade linux-image-6.14.0-1008-gcp-64kUpgrade linux-image-realtimeUpgrade linux-image-genericUpgrade linux-image-generic-64kUpgrade linux-image-6.14.0-22-generic-64kUpgrade linux-image-6.14.0-1007-awsUpgrade linux-image-oracle-64kUpgrade linux-image-raspiUpgrade linux-image-6.14.0-1008-gcpUpgrade linux-image-6.14.0-1007-raspiUpgrade linux-image-6.14.0-1007-azureUpgrade linux-image-azure-fdeUpgrade linux-image-gcpUpgrade linux-image-azureUpgrade linux-image-6.14.0-22-genericUpgrade linux-image-oracleUpgrade linux-image-awsUpgrade linux-image-6.14.0-1007-aws-64k | Jun 26, 2025 | Apr 16, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub