CVE-2025-21961: eth: bnxt: fix truesize for mb-xdp-pass case
eth: bnxt: fix truesize for mb-xdp-pass case
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.12.20-1 - Upgrade
Upgrade
linux/Kernelto a version that resolves this vulnerability.Fixed in 6.1.191 - Upgrade
Upgrade
linux/Kernelto a version that resolves this vulnerability.Fixed in 6.6.160 - Upgrade
Upgrade
linux/Kernelto a version that resolves this vulnerability.Fixed in 6.12.20 - Upgrade
Upgrade
linux/Kernelto a version that resolves this vulnerability.Fixed in 6.13.8 - Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.12.107-1Fixed in 6.12.115-2Fixed in 7.2.12-1Fixed in 7.2.15-1
Event History
Frequently Asked Questions
What is the severity of CVE-2025-21961?
The severity of CVE-2025-21961 is considered moderate as it affects packet handling in the Linux kernel.
How do I fix CVE-2025-21961?
To fix CVE-2025-21961, you should update your Linux kernel to the latest stable version that contains the security patch.
Which systems are affected by CVE-2025-21961?
CVE-2025-21961 affects systems running vulnerable versions of the Linux kernel with the bnxt driver.
What is the impact of CVE-2025-21961?
The impact of CVE-2025-21961 can lead to improper packet handling, which may impact network performance.
Is there any workaround for CVE-2025-21961?
Currently, there are no known workarounds for CVE-2025-21961 other than applying the necessary kernel updates.