In the Linux kernel, the following vulnerability has been resolved:
eth: bnxt: fix out-of-range access of vnic_info array
The bnxt_queue_{start | stop}() access vnic_info as much as allocated, which indicates bp->nr_vnics. So, it should not reach bp->vnic_info[bp->nr_vnics].
CVSS Details
- CVSS 3.1 Base Score: 7.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade kernel-livepatch-6.12.35-55.103Upgrade kernel-develUpgrade perf6.12-debuginfoUpgrade kernel-libbpf-develUpgrade kernel-tools-develUpgrade kernel-headersUpgrade kernel6.12-debuginfoUpgrade python3-perf6.12-debuginfoUpgrade kernel-modules-extra-commonUpgrade python3-perf6.12Upgrade perf6.12Upgrade kernel-libbpf-debuginfoUpgrade kernel-libbpfUpgrade kernel6.12Upgrade bpftool-debuginfoUpgrade bpftoolUpgrade kernel-libbpf-staticUpgrade kernel6.12-debuginfo-common-x86_64Upgrade kernel6.12-debuginfo-common-aarch64Upgrade kernel-tools-debuginfoUpgrade kernel6.12-modules-extraUpgrade kernel-tools | Jul 11, 2025 | Apr 16, 2025 |
| Debian | — | Upgrade linux | Jul 23, 2026 | Jul 23, 2026 |
| Redhat_linux | — | — | Jul 9, 2025 | Apr 16, 2025 |
| Suse | — | Upgrade kernel-source-vanillaUpgrade kernel-defaultUpgrade kernel-azureUpgrade kernel-obs-buildUpgrade kernel-azure-vdsoUpgrade reiserfs-kmp-defaultUpgrade kernel-docsUpgrade kernel-default-baseUpgrade kernel-64kb-extraUpgrade kernel-kvmsmallUpgrade kernel-sourceUpgrade kernel-kvmsmall-develUpgrade kernel-macrosUpgrade kernel-docs-htmlUpgrade kernel-default-develUpgrade kernel-syms-azureUpgrade kernel-source-azureUpgrade kernel-64kbUpgrade kernel-default-livepatchUpgrade kernel-64kb-develUpgrade kernel-kvmsmall-vdsoUpgrade kernel-develUpgrade kernel-default-vdsoUpgrade kernel-obs-qaUpgrade kernel-zfcpdumpUpgrade kernel-azure-develUpgrade kernel-symsUpgrade kernel-devel-azureUpgrade kernel-default-extraUpgrade kernel-azure-extra | Dec 5, 2025 | Jun 13, 2025 |
| Ubuntu | — | Upgrade linux-image-oracleUpgrade linux-image-6.14.0-1007-azureUpgrade linux-image-awsUpgrade linux-image-azure-fdeUpgrade linux-image-realtimeUpgrade linux-image-6.14.0-22-genericUpgrade linux-image-6.14.0-1007-awsUpgrade linux-image-gcp-64kUpgrade linux-image-gcpUpgrade linux-image-6.14.0-1007-raspiUpgrade linux-image-6.14.0-1007-aws-64kUpgrade linux-image-raspiUpgrade linux-image-6.14.0-1004-realtimeUpgrade linux-image-oracle-64kUpgrade linux-image-6.14.0-1007-oracleUpgrade linux-image-generic-64kUpgrade linux-image-azureUpgrade linux-image-6.14.0-1007-azure-fdeUpgrade linux-image-genericUpgrade linux-image-6.14.0-22-generic-64kUpgrade linux-image-6.14.0-1007-oracle-64kUpgrade linux-image-6.14.0-1008-gcp-64kUpgrade linux-image-aws-64kUpgrade linux-image-6.14.0-1008-gcp | Jun 26, 2025 | Apr 16, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub