CVE-2025-21682: eth: bnxt: always recalculate features after XDP clearing, fix null-deref
eth: bnxt: always recalculate features after XDP clearing, fix null-deref
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.12.27-1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 6.6.130.1-3 - Upgrade
Upgrade
Linux kernel (bnxt driver)to a version that resolves this vulnerability.Patch eth: bnxt: always recalculate features after XDP clearing, fix null-deref - Compensating control
After disabling XDP (e.g., `ip link set dev eth0 xdp off`) avoid changing channel/RSS settings in a way that reduces Rx rings by ~/2 until the fixed kernel/driver is in place, since the crash can occur when RSS reconfiguration logic skips the RSS hash-table update while feature reconfiguration is pending.
Event History
Frequently Asked Questions
What is the severity of CVE-2025-21682?
CVE-2025-21682 has a severity rating that varies based on environmental factors but is generally classified as a medium priority vulnerability.
How do I fix CVE-2025-21682?
To fix CVE-2025-21682, ensure that you update the Linux kernel to the latest stable version that includes the patch for this vulnerability.
What systems are affected by CVE-2025-21682?
CVE-2025-21682 affects all versions of the Linux kernel where the vulnerable functionality exists.
What happens if CVE-2025-21682 is exploited?
Exploitation of CVE-2025-21682 can lead to a null pointer dereference, potentially causing instability in the network functionality.
When was CVE-2025-21682 reported?
CVE-2025-21682 was reported and resolved in 2025, but the specific date of disclosure may vary.