In the Linux kernel, the following vulnerability has been resolved:
eth: bnxt: fix out-of-range access of vnic_info array
The bnxt_queue_{start | stop}() access vnic_info as much as allocated, which indicates bp->nr_vnics. So, it should not reach bp->vnic_info[bp->nr_vnics].
CVSS Details
- CVSS 3.1 Base Score: 7.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade kernel-develUpgrade kernel-modules-extra-commonUpgrade python3-perf6.12-debuginfoUpgrade kernel-tools-develUpgrade kernel-livepatch-6.12.35-55.103Upgrade kernel6.12-debuginfoUpgrade python3-perf6.12Upgrade perf6.12-debuginfoUpgrade kernel-libbpf-develUpgrade kernel-headersUpgrade kernel6.12Upgrade kernel-libbpfUpgrade kernel-libbpf-debuginfoUpgrade kernel-libbpf-staticUpgrade perf6.12Upgrade kernel-tools-debuginfoUpgrade kernel-toolsUpgrade kernel6.12-debuginfo-common-x86_64Upgrade kernel6.12-modules-extraUpgrade kernel6.12-debuginfo-common-aarch64Upgrade bpftool-debuginfoUpgrade bpftool | Jul 11, 2025 | Apr 16, 2025 |
| Debian | — | Upgrade linux | Jul 23, 2026 | Jul 23, 2026 |
| Redhat_linux | — | — | Jul 9, 2025 | Apr 16, 2025 |
| Suse | — | Upgrade kernel-zfcpdumpUpgrade kernel-obs-qaUpgrade kernel-symsUpgrade kernel-azure-extraUpgrade kernel-azure-develUpgrade kernel-source-azureUpgrade kernel-kvmsmall-develUpgrade kernel-default-develUpgrade kernel-default-extraUpgrade kernel-default-livepatchUpgrade kernel-docs-htmlUpgrade kernel-kvmsmallUpgrade kernel-macrosUpgrade kernel-64kbUpgrade kernel-default-vdsoUpgrade kernel-syms-azureUpgrade kernel-sourceUpgrade kernel-develUpgrade kernel-kvmsmall-vdsoUpgrade kernel-64kb-develUpgrade kernel-devel-azureUpgrade kernel-default-baseUpgrade reiserfs-kmp-defaultUpgrade kernel-source-vanillaUpgrade kernel-azureUpgrade kernel-obs-buildUpgrade kernel-docsUpgrade kernel-defaultUpgrade kernel-azure-vdsoUpgrade kernel-64kb-extra | Dec 5, 2025 | Jun 13, 2025 |
| Ubuntu | — | Upgrade linux-image-6.14.0-1007-azure-fdeUpgrade linux-image-6.14.0-22-generic-64kUpgrade linux-image-azureUpgrade linux-image-6.14.0-1008-gcpUpgrade linux-image-6.14.0-1007-oracle-64kUpgrade linux-image-genericUpgrade linux-image-6.14.0-1008-gcp-64kUpgrade linux-image-generic-64kUpgrade linux-image-aws-64kUpgrade linux-image-raspiUpgrade linux-image-6.14.0-1007-aws-64kUpgrade linux-image-6.14.0-1007-awsUpgrade linux-image-6.14.0-1007-raspiUpgrade linux-image-gcpUpgrade linux-image-6.14.0-1007-oracleUpgrade linux-image-oracleUpgrade linux-image-gcp-64kUpgrade linux-image-6.14.0-1007-azureUpgrade linux-image-6.14.0-22-genericUpgrade linux-image-6.14.0-1004-realtimeUpgrade linux-image-oracle-64kUpgrade linux-image-azure-fdeUpgrade linux-image-awsUpgrade linux-image-realtime | Jun 26, 2025 | Apr 16, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub