In the Linux kernel, the following vulnerability has been resolved:
bnxt_en: Mask the bd_cnt field in the TX BD properly
The bd_cnt field in the TX BD specifies the total number of BDs for the TX packet. The bd_cnt field has 5 bits and the maximum number supported is 32 with the value 0.
CONFIG_MAX_SKB_FRAGS can be modified and the total number of SKB fragments can approach or exceed the maximum supported by the chip. Add a macro to properly mask the bd_cnt field so that the value 32 will be properly masked and set to 0 in the bd_cnd field.
Without this patch, the out-of-range bd_cnt value will corrupt the TX BD and may cause TX timeout.
The next patch will check for values exceeding 32.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade kernel-headersUpgrade kernel-libbpf-debuginfoUpgrade kernel6.12-modules-extraUpgrade kernel-livepatch-6.12.29-33.102Upgrade kernel-libbpfUpgrade kernel-modules-extra-commonUpgrade kernel6.12-debuginfo-common-x86_64Upgrade kernel6.12-debuginfo-common-aarch64Upgrade kernel-tools-develUpgrade kernel6.12Upgrade perf6.12-debuginfoUpgrade bpftoolUpgrade kernel-toolsUpgrade python3-perf6.12-debuginfoUpgrade kernel6.12-debuginfoUpgrade perf6.12Upgrade kernel-develUpgrade bpftool-debuginfoUpgrade kernel-libbpf-develUpgrade python3-perf6.12Upgrade kernel-libbpf-staticUpgrade kernel-tools-debuginfo | Jun 3, 2025 | Apr 16, 2025 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Apr 16, 2025 |
| Suse | — | Upgrade reiserfs-kmp-azureUpgrade dtb-caviumUpgrade dtb-exynosUpgrade kernel-rt-develUpgrade kernel-default-base-rebuildUpgrade kernel-source-vanillaUpgrade kernel-source-azureUpgrade kernel-devel-rtUpgrade cluster-md-kmp-rtUpgrade dtb-alteraUpgrade kernel-debug-vdsoUpgrade dtb-qcomUpgrade kernel-develUpgrade kernel-devel-azureUpgrade kernel-rtUpgrade kernel-default-vdsoUpgrade kernel-rt-extraUpgrade kernel-kvmsmallUpgrade dtb-lgUpgrade kernel-default-optionalUpgrade kernel-azure-develUpgrade kernel-obs-qaUpgrade kernel-azure-optionalUpgrade kernel-obs-buildUpgrade kernel-default-extraUpgrade kernel-macrosUpgrade dtb-mediatekUpgrade kselftests-kmp-64kbUpgrade dtb-sprdUpgrade dtb-xilinxUpgrade kernel-azureUpgrade kernel-sourceUpgrade gfs2-kmp-rtUpgrade dtb-rockchipUpgrade gfs2-kmp-azureUpgrade dtb-armUpgrade kernel-kvmsmall-develUpgrade kernel-rt-vdsoUpgrade kernel-syms-azureUpgrade dtb-apmUpgrade dlm-kmp-64kbUpgrade dtb-amlogicUpgrade dtb-nvidiaUpgrade kernel-docs-htmlUpgrade kernel-default-livepatch-develUpgrade kernel-defaultUpgrade kernel-debug-develUpgrade kernel-zfcpdumpUpgrade kernel-64kb-optionalUpgrade gfs2-kmp-64kbUpgrade kernel-default-baseUpgrade dtb-amdUpgrade kernel-azure-vdsoUpgrade dlm-kmp-azureUpgrade kernel-default-develUpgrade kernel-kvmsmall-vdsoUpgrade kernel-azure-extraUpgrade kernel-64kb-extraUpgrade dtb-renesasUpgrade dtb-freescaleUpgrade dtb-broadcomUpgrade dlm-kmp-rtUpgrade dlm-kmp-defaultUpgrade kernel-64kbUpgrade ocfs2-kmp-rtUpgrade gfs2-kmp-defaultUpgrade dtb-marvellUpgrade cluster-md-kmp-64kbUpgrade kernel-rt-livepatch-develUpgrade kernel-debugUpgrade reiserfs-kmp-defaultUpgrade ocfs2-kmp-defaultUpgrade kernel-rt_debugUpgrade dtb-allwinnerUpgrade kernel-syms-rtUpgrade kernel-default-livepatchUpgrade kselftests-kmp-azureUpgrade reiserfs-kmp-64kbUpgrade kselftests-kmp-rtUpgrade kernel-rt-optionalUpgrade dtb-socionextUpgrade dtb-appleUpgrade kernel-rt_debug-develUpgrade kernel-source-rtUpgrade dtb-hisiliconUpgrade cluster-md-kmp-defaultUpgrade ocfs2-kmp-64kbUpgrade cluster-md-kmp-azureUpgrade kernel-symsUpgrade kernel-rt_debug-vdsoUpgrade dtb-amazonUpgrade kernel-64kb-develUpgrade reiserfs-kmp-rtUpgrade kselftests-kmp-defaultUpgrade kernel-docsUpgrade ocfs2-kmp-azure | Dec 5, 2025 | May 21, 2025 |
| Ubuntu | — | Upgrade linux-image-6.14.0-1007-azure-fdeUpgrade linux-image-6.14.0-1007-oracleUpgrade linux-image-6.14.0-1007-oracle-64kUpgrade linux-image-6.14.0-22-generic-64kUpgrade linux-image-gcp-64kUpgrade linux-image-generic-64kUpgrade linux-image-aws-64kUpgrade linux-image-6.14.0-1004-realtimeUpgrade linux-image-6.14.0-1008-gcp-64kUpgrade linux-image-realtimeUpgrade linux-image-genericUpgrade linux-image-6.14.0-1007-azureUpgrade linux-image-6.14.0-1007-raspiUpgrade linux-image-oracleUpgrade linux-image-awsUpgrade linux-image-6.14.0-1007-awsUpgrade linux-image-6.14.0-1008-gcpUpgrade linux-image-raspiUpgrade linux-image-azure-fdeUpgrade linux-image-6.14.0-1007-aws-64kUpgrade linux-image-azureUpgrade linux-image-6.14.0-22-genericUpgrade linux-image-gcpUpgrade linux-image-oracle-64k | Jun 26, 2025 | Apr 16, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Sep 21, 2026 | Apr 16, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub