In the Linux kernel, the following vulnerability has been resolved:
eth: bnxt: fix out-of-range access of vnic_info array
The bnxt_queue_{start | stop}() access vnic_info as much as allocated, which indicates bp->nr_vnics. So, it should not reach bp->vnic_info[bp->nr_vnics].
CVSS Details
- CVSS 3.1 Base Score: 7.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade perf6.12Upgrade kernel6.12-debuginfo-common-x86_64Upgrade kernel6.12Upgrade kernel-libbpfUpgrade kernel-toolsUpgrade kernel-libbpf-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel6.12-debuginfo-common-aarch64Upgrade kernel6.12-modules-extraUpgrade bpftool-debuginfoUpgrade kernel-libbpf-staticUpgrade bpftoolUpgrade kernel-modules-extra-commonUpgrade perf6.12-debuginfoUpgrade kernel6.12-debuginfoUpgrade python3-perf6.12Upgrade kernel-develUpgrade python3-perf6.12-debuginfoUpgrade kernel-tools-develUpgrade kernel-livepatch-6.12.35-55.103Upgrade kernel-headersUpgrade kernel-libbpf-devel | Jul 11, 2025 | Apr 16, 2025 |
| Debian | — | Upgrade linux | Jul 23, 2026 | Jul 23, 2026 |
| Redhat_linux | — | — | Jul 9, 2025 | Apr 16, 2025 |
| Suse | — | Upgrade kernel-default-baseUpgrade kernel-obs-buildUpgrade kernel-64kb-extraUpgrade kernel-source-vanillaUpgrade reiserfs-kmp-defaultUpgrade kernel-azureUpgrade kernel-azure-vdsoUpgrade kernel-defaultUpgrade kernel-docsUpgrade kernel-default-livepatchUpgrade kernel-default-develUpgrade kernel-develUpgrade kernel-obs-qaUpgrade kernel-symsUpgrade kernel-kvmsmall-develUpgrade kernel-sourceUpgrade kernel-64kb-develUpgrade kernel-kvmsmall-vdsoUpgrade kernel-zfcpdumpUpgrade kernel-kvmsmallUpgrade kernel-default-vdsoUpgrade kernel-64kbUpgrade kernel-azure-develUpgrade kernel-macrosUpgrade kernel-docs-htmlUpgrade kernel-syms-azureUpgrade kernel-source-azureUpgrade kernel-azure-extraUpgrade kernel-devel-azureUpgrade kernel-default-extra | Dec 5, 2025 | Jun 13, 2025 |
| Ubuntu | — | Upgrade linux-image-6.14.0-1008-gcp-64kUpgrade linux-image-azureUpgrade linux-image-6.14.0-22-generic-64kUpgrade linux-image-generic-64kUpgrade linux-image-aws-64kUpgrade linux-image-genericUpgrade linux-image-6.14.0-1007-azure-fdeUpgrade linux-image-6.14.0-1008-gcpUpgrade linux-image-6.14.0-1007-oracle-64kUpgrade linux-image-azure-fdeUpgrade linux-image-awsUpgrade linux-image-oracle-64kUpgrade linux-image-6.14.0-1004-realtimeUpgrade linux-image-6.14.0-22-genericUpgrade linux-image-6.14.0-1007-raspiUpgrade linux-image-6.14.0-1007-aws-64kUpgrade linux-image-6.14.0-1007-awsUpgrade linux-image-raspiUpgrade linux-image-6.14.0-1007-oracleUpgrade linux-image-gcpUpgrade linux-image-gcp-64kUpgrade linux-image-6.14.0-1007-azureUpgrade linux-image-oracleUpgrade linux-image-realtime | Jun 26, 2025 | Apr 16, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub