In the Linux kernel, the following vulnerability has been resolved:
eth: bnxt: fix out-of-range access of vnic_info array
The bnxt_queue_{start | stop}() access vnic_info as much as allocated, which indicates bp->nr_vnics. So, it should not reach bp->vnic_info[bp->nr_vnics].
CVSS Details
- CVSS 3.1 Base Score: 7.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade kernel-develUpgrade kernel-tools-develUpgrade kernel6.12-debuginfoUpgrade python3-perf6.12-debuginfoUpgrade perf6.12-debuginfoUpgrade kernel-modules-extra-commonUpgrade kernel-headersUpgrade kernel-libbpf-develUpgrade kernel-livepatch-6.12.35-55.103Upgrade python3-perf6.12Upgrade kernel6.12Upgrade kernel-tools-debuginfoUpgrade bpftoolUpgrade bpftool-debuginfoUpgrade kernel6.12-modules-extraUpgrade kernel-libbpfUpgrade kernel6.12-debuginfo-common-aarch64Upgrade kernel-libbpf-debuginfoUpgrade perf6.12Upgrade kernel-libbpf-staticUpgrade kernel6.12-debuginfo-common-x86_64Upgrade kernel-tools | Jul 11, 2025 | Apr 16, 2025 |
| Debian | — | Upgrade linux | Jul 23, 2026 | Jul 23, 2026 |
| Redhat_linux | — | — | Jul 9, 2025 | Apr 16, 2025 |
| Suse | — | Upgrade kernel-default-vdsoUpgrade kernel-kvmsmall-vdsoUpgrade kernel-64kbUpgrade kernel-syms-azureUpgrade kernel-azure-develUpgrade kernel-zfcpdumpUpgrade kernel-kvmsmallUpgrade kernel-develUpgrade kernel-default-extraUpgrade kernel-devel-azureUpgrade kernel-default-develUpgrade kernel-kvmsmall-develUpgrade kernel-docs-htmlUpgrade kernel-azure-extraUpgrade kernel-sourceUpgrade kernel-source-azureUpgrade kernel-obs-qaUpgrade kernel-symsUpgrade kernel-macrosUpgrade kernel-64kb-develUpgrade kernel-default-livepatchUpgrade kernel-defaultUpgrade kernel-default-baseUpgrade kernel-obs-buildUpgrade kernel-azure-vdsoUpgrade kernel-64kb-extraUpgrade reiserfs-kmp-defaultUpgrade kernel-docsUpgrade kernel-source-vanillaUpgrade kernel-azure | Dec 5, 2025 | Jun 13, 2025 |
| Ubuntu | — | Upgrade linux-image-realtimeUpgrade linux-image-awsUpgrade linux-image-6.14.0-1004-realtimeUpgrade linux-image-6.14.0-1007-oracleUpgrade linux-image-oracle-64kUpgrade linux-image-oracleUpgrade linux-image-gcpUpgrade linux-image-azure-fdeUpgrade linux-image-6.14.0-1007-awsUpgrade linux-image-gcp-64kUpgrade linux-image-6.14.0-1007-raspiUpgrade linux-image-6.14.0-22-genericUpgrade linux-image-6.14.0-1007-aws-64kUpgrade linux-image-6.14.0-1007-azureUpgrade linux-image-raspiUpgrade linux-image-6.14.0-1007-oracle-64kUpgrade linux-image-generic-64kUpgrade linux-image-azureUpgrade linux-image-6.14.0-1007-azure-fdeUpgrade linux-image-genericUpgrade linux-image-aws-64kUpgrade linux-image-6.14.0-1008-gcpUpgrade linux-image-6.14.0-1008-gcp-64kUpgrade linux-image-6.14.0-22-generic-64k | Jun 26, 2025 | Apr 16, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub