CVE-2025-38439: bnxt_en: Set DMA unmap len correctly for XDP_REDIRECT
bnxten: Set DMA unmap len correctly for XDPREDIRECT
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.1.176-1Fixed in 6.1.190-1Fixed in 6.12.107-1Fixed in 6.12.113-1Fixed in 7.2.12-1Fixed in 7.2.13-1 - Compensating control
In the bnxt_en driver, when transmitting an XDP_REDIRECT packet, call dma_unmap_len_set() with the proper DMA unmap length instead of 0; this is required to prevent the IOMMU warning on systems with IOMMU enabled.
Event History
Frequently Asked Questions
What is the severity of CVE-2025-38439?
CVE-2025-38439 has a severity rating of medium due to the potential for data corruption or crashes in affected systems.
How do I fix CVE-2025-38439?
The fix for CVE-2025-38439 involves updating to the latest version of the Linux kernel which includes the necessary patches.
What systems are affected by CVE-2025-38439?
CVE-2025-38439 primarily affects systems running the Linux kernel, particularly those using the bnxt_en driver.
Is CVE-2025-38439 exploitable in a production environment?
Yes, CVE-2025-38439 can be exploited in a production environment if the vulnerable kernel version is in use.
What are the potential impacts of CVE-2025-38439?
The potential impacts of CVE-2025-38439 include system instability, packet transmission issues, and possible data integrity problems.