CVE-2025-22108: bnxt_en: Mask the bd_cnt field in the TX BD properly
bnxten: Mask the bdcnt field in the TX BD properly
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.1.176-1Fixed in 6.1.190-1Fixed in 6.12.116-1Fixed in 7.2.15-1Fixed in 7.3.3-1 - Upgrade
Upgrade
debian/linux-6.12to a version that resolves this vulnerability.Fixed in 6.12.115-2~deb12u1 - Upgrade
Upgrade
ubuntu/linux-nvidia-tegrato a version that resolves this vulnerability.Fixed in 6.8.0-1035.38 - Compensating control
Add a macro in bnxt_en to properly mask the TX BD bd_cnt field so that the value 32 is represented as 0 in the bd_cnd field.
Event History
Frequently Asked Questions
What is the severity of CVE-2025-22108?
CVE-2025-22108 has been assessed with a severity rating of medium due to its impact on transmission packet handling in the Linux kernel.
How do I fix CVE-2025-22108?
To fix CVE-2025-22108, update the Linux kernel to the latest stable version where the vulnerability has been addressed.
Which versions of the Linux Kernel are affected by CVE-2025-22108?
CVE-2025-22108 affects various versions of the Linux Kernel where the bd_cnt field in the TX BD is not properly masked.
What is the main impact of CVE-2025-22108?
The main impact of CVE-2025-22108 is improperly handled transmission packet data, which could potentially lead to packet corruption.
Is CVE-2025-22108 being actively exploited in the wild?
As of now, there are no reported active exploits of CVE-2025-22108, but it is advisable to apply patches promptly to ensure system security.