In the Linux kernel, the following vulnerability has been resolved:
eth: bnxt: fix out-of-range access of vnic_info array
The bnxt_queue_{start | stop}() access vnic_info as much as allocated, which indicates bp->nr_vnics. So, it should not reach bp->vnic_info[bp->nr_vnics].
CVSS Details
- CVSS 3.1 Base Score: 7.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade kernel-toolsUpgrade bpftoolUpgrade bpftool-debuginfoUpgrade kernel6.12-modules-extraUpgrade kernel6.12-debuginfo-common-aarch64Upgrade kernel-libbpf-staticUpgrade kernel-tools-debuginfoUpgrade kernel6.12-debuginfo-common-x86_64Upgrade kernel-libbpf-debuginfoUpgrade perf6.12Upgrade kernel-libbpfUpgrade kernel6.12Upgrade perf6.12-debuginfoUpgrade kernel6.12-debuginfoUpgrade python3-perf6.12Upgrade kernel-headersUpgrade kernel-livepatch-6.12.35-55.103Upgrade kernel-modules-extra-commonUpgrade kernel-libbpf-develUpgrade python3-perf6.12-debuginfoUpgrade kernel-develUpgrade kernel-tools-devel | Jul 11, 2025 | Apr 16, 2025 |
| Debian | — | Upgrade linux | Jul 23, 2026 | Jul 23, 2026 |
| Redhat_linux | — | — | Jul 9, 2025 | Apr 16, 2025 |
| Suse | — | Upgrade kernel-kvmsmallUpgrade kernel-syms-azureUpgrade kernel-obs-qaUpgrade kernel-64kbUpgrade kernel-default-vdsoUpgrade kernel-macrosUpgrade kernel-docs-htmlUpgrade kernel-sourceUpgrade kernel-default-extraUpgrade kernel-devel-azureUpgrade kernel-azure-extraUpgrade kernel-kvmsmall-vdsoUpgrade kernel-develUpgrade kernel-kvmsmall-develUpgrade kernel-azure-develUpgrade kernel-default-livepatchUpgrade kernel-symsUpgrade kernel-source-azureUpgrade kernel-64kb-develUpgrade kernel-zfcpdumpUpgrade kernel-default-develUpgrade kernel-obs-buildUpgrade kernel-64kb-extraUpgrade reiserfs-kmp-defaultUpgrade kernel-azure-vdsoUpgrade kernel-docsUpgrade kernel-azureUpgrade kernel-source-vanillaUpgrade kernel-default-baseUpgrade kernel-default | Dec 5, 2025 | Jun 13, 2025 |
| Ubuntu | — | Upgrade linux-image-generic-64kUpgrade linux-image-6.14.0-1007-azure-fdeUpgrade linux-image-azureUpgrade linux-image-genericUpgrade linux-image-aws-64kUpgrade linux-image-6.14.0-1008-gcp-64kUpgrade linux-image-6.14.0-22-generic-64kUpgrade linux-image-6.14.0-1008-gcpUpgrade linux-image-6.14.0-1007-oracle-64kUpgrade linux-image-6.14.0-1007-raspiUpgrade linux-image-6.14.0-22-genericUpgrade linux-image-6.14.0-1007-aws-64kUpgrade linux-image-6.14.0-1007-awsUpgrade linux-image-azure-fdeUpgrade linux-image-realtimeUpgrade linux-image-awsUpgrade linux-image-oracleUpgrade linux-image-gcp-64kUpgrade linux-image-6.14.0-1007-azureUpgrade linux-image-gcpUpgrade linux-image-raspiUpgrade linux-image-6.14.0-1007-oracleUpgrade linux-image-6.14.0-1004-realtimeUpgrade linux-image-oracle-64k | Jun 26, 2025 | Apr 16, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub