In the Linux kernel, the following vulnerability has been resolved:
bnxt_en: Fix error handling path in bnxt_init_chip()
WARN_ON() is triggered in __flush_work() if bnxt_init_chip() fails because we call cancel_work_sync() on dim work that has not been initialized.
WARNING: CPU: 37 PID: 5223 at kernel/workqueue.c:4201 __flush_work.isra.0+0x212/0x230
The driver relies on the BNXT_STATE_NAPI_DISABLED bit to check if dim work has already been cancelled. But in the bnxt_open() path, BNXT_STATE_NAPI_DISABLED is not set and this causes the error path to think that it needs to cancel the uninitalized dim work. Fix it by setting BNXT_STATE_NAPI_DISABLED during initialization. The bit will be cleared when we enable NAPI and initialize dim work.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 23, 2026 | Jul 23, 2026 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 20, 2025 |
| Suse | — | Upgrade kernel-azure-vdsoUpgrade kernel-defaultUpgrade kernel-kvmsmall-vdsoUpgrade kernel-64kb-extraUpgrade kernel-zfcpdumpUpgrade kernel-default-develUpgrade kernel-docs-htmlUpgrade kernel-docsUpgrade kernel-64kbUpgrade kernel-azure-extraUpgrade kernel-symsUpgrade kernel-default-livepatchUpgrade kernel-64kb-develUpgrade kernel-source-vanillaUpgrade kernel-sourceUpgrade kernel-kvmsmallUpgrade kernel-develUpgrade kernel-azureUpgrade kernel-kvmsmall-develUpgrade kernel-macrosUpgrade kernel-devel-azureUpgrade kernel-azure-develUpgrade kernel-obs-qaUpgrade kernel-source-azureUpgrade kernel-default-vdsoUpgrade kernel-default-extra | Dec 5, 2025 | Dec 5, 2025 |
| Ubuntu | — | Upgrade linux-image-6.14.0-1009-aws-64kUpgrade linux-image-generic-6.14Upgrade linux-image-genericUpgrade linux-image-oem-24.04cUpgrade linux-image-6.14.0-24-genericUpgrade linux-image-raspiUpgrade linux-image-aws-6.14Upgrade linux-image-6.14.0-1007-oemUpgrade linux-image-gcpUpgrade linux-image-aws-64kUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-realtime-6.14Upgrade linux-image-oem-24.04aUpgrade linux-image-raspi-6.14Upgrade linux-image-aws-64k-6.14Upgrade linux-image-6.14.0-1009-awsUpgrade linux-image-6.14.0-1009-raspiUpgrade linux-image-generic-64kUpgrade linux-image-oracle-64kUpgrade linux-image-azureUpgrade linux-image-gcp-64kUpgrade linux-image-6.14.0-1009-oracleUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-oem-24.04Upgrade linux-image-virtual-6.14Upgrade linux-image-gcp-6.14Upgrade linux-image-6.14.0-1011-gcpUpgrade linux-image-oem-6.14Upgrade linux-image-6.14.0-1011-gcp-64kUpgrade linux-image-awsUpgrade linux-image-generic-64k-6.14Upgrade linux-image-gcp-64k-6.14Upgrade linux-image-oracle-64k-6.14Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-oracle-6.14Upgrade linux-image-oracleUpgrade linux-image-azure-6.14Upgrade linux-image-6.14.0-1006-realtimeUpgrade linux-image-6.14.0-24-generic-64kUpgrade linux-image-realtimeUpgrade linux-image-6.14.0-1010-azureUpgrade linux-image-6.14.0-1009-oracle-64kUpgrade linux-image-virtual | Jun 26, 2025 | May 20, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub