CVE-2025-39810: bnxt_en: Fix memory corruption when FW resources change during ifdown

Affected Software

Remediation

Recommended actions to resolve this vulnerability, in priority order.

1. Upgrade

   Upgrade debian/linux to a version that resolves this vulnerability.

   Fixed in 6.12.107-1Fixed in 6.12.113-1Fixed in 7.2.12-1Fixed in 7.2.13-1
2. Upgrade

   Upgrade ubuntu/linux-aws-6.8 to a version that resolves this vulnerability.

   Fixed in 6.8.0-1050.53~22.04.1
3. Upgrade

   Upgrade ubuntu/linux-azure-6.8 to a version that resolves this vulnerability.

   Fixed in 6.8.0-1051.57~22.04.1
4. Upgrade

   Upgrade ubuntu/linux-azure-fde-6.8 to a version that resolves this vulnerability.

   Fixed in 6.8.0-1058.65~22.04.1
5. Upgrade

   Upgrade ubuntu/linux-gcp-6.8 to a version that resolves this vulnerability.

   Fixed in 6.8.0-1052.55~22.04.1
6. Upgrade

   Upgrade ubuntu/linux-hwe-6.8 to a version that resolves this vulnerability.

   Fixed in 6.8.0-106.106~22.04.1
7. Upgrade

   Upgrade ubuntu/linux-ibm-6.8 to a version that resolves this vulnerability.

   Fixed in 6.8.0-1049.49~22.04.1
8. Upgrade

   Upgrade ubuntu/linux-lowlatency-hwe-6.8 to a version that resolves this vulnerability.

   Fixed in 6.8.0-106.106.1~22.04.1
9. Upgrade

   Upgrade ubuntu/linux-nvidia-6.8 to a version that resolves this vulnerability.

   Fixed in 6.8.0-1049.52~22.04.1
10. Upgrade

    Upgrade ubuntu/linux-oracle-6.8 to a version that resolves this vulnerability.

    Fixed in 6.8.0-1047.48~22.04.1
11. Upgrade

    Upgrade ubuntu/linux-riscv-6.8 to a version that resolves this vulnerability.

    Fixed in 6.8.0-106.106~22.04.1
12. Upgrade

    Upgrade ubuntu/linux-realtime-6.8 to a version that resolves this vulnerability.

    Fixed in 6.8.1-1045.46~22.04.1
13. Upgrade

    Upgrade ubuntu/linux to a version that resolves this vulnerability.

    Fixed in 6.8.0-106.106
14. Upgrade

    Upgrade ubuntu/linux-aws to a version that resolves this vulnerability.

    Fixed in 6.8.0-1050.53
15. Upgrade

    Upgrade ubuntu/linux-azure to a version that resolves this vulnerability.

    Fixed in 6.8.0-1051.57
16. Upgrade

    Upgrade ubuntu/linux-azure-fde to a version that resolves this vulnerability.

    Fixed in 6.8.0-1058.65
17. Upgrade

    Upgrade ubuntu/linux-gcp to a version that resolves this vulnerability.

    Fixed in 6.8.0-1052.55
18. Upgrade

    Upgrade ubuntu/linux-gke to a version that resolves this vulnerability.

    Fixed in 6.8.0-1048.53
19. Upgrade

    Upgrade ubuntu/linux-gkeop to a version that resolves this vulnerability.

    Fixed in 6.8.0-1035.38
20. Upgrade

    Upgrade ubuntu/linux-ibm to a version that resolves this vulnerability.

    Fixed in 6.8.0-1049.49
21. Upgrade

    Upgrade ubuntu/linux-lowlatency to a version that resolves this vulnerability.

    Fixed in 6.8.0-106.106.1
22. Upgrade

    Upgrade ubuntu/linux-nvidia to a version that resolves this vulnerability.

    Fixed in 6.8.0-1049.52
23. Upgrade

    Upgrade ubuntu/linux-nvidia-lowlatency to a version that resolves this vulnerability.

    Fixed in 6.8.0-1049.52.1
24. Upgrade

    Upgrade ubuntu/linux-nvidia-tegra to a version that resolves this vulnerability.

    Fixed in 6.8.0-1020.20
25. Upgrade

    Upgrade ubuntu/linux-oracle to a version that resolves this vulnerability.

    Fixed in 6.8.0-1047.48
26. Upgrade

    Upgrade ubuntu/linux-raspi to a version that resolves this vulnerability.

    Fixed in 6.8.0-1050.54
27. Upgrade

    Upgrade ubuntu/linux-xilinx to a version that resolves this vulnerability.

    Fixed in 6.8.0-1028.29
28. Upgrade

    Upgrade ubuntu/linux-bluefield to a version that resolves this vulnerability.

    Fixed in 6.8.0-1017.21
29. Upgrade

    Upgrade ubuntu/linux-raspi-realtime to a version that resolves this vulnerability.

    Fixed in 6.8.0-2040.41
30. Upgrade

    Upgrade ubuntu/linux-realtime to a version that resolves this vulnerability.

    Fixed in 6.8.1-1045.46
31. Upgrade

    Upgrade ubuntu/linux-aws-fips to a version that resolves this vulnerability.

    Fixed in 6.8.0-1050.53+fips1
32. Upgrade

    Upgrade ubuntu/linux-azure-fips to a version that resolves this vulnerability.

    Fixed in 6.8.0-1052.58+fips1
33. Upgrade

    Upgrade ubuntu/linux-fips to a version that resolves this vulnerability.

    Fixed in 6.8.0-106.106+fips1
34. Upgrade

    Upgrade ubuntu/linux-gcp-fips to a version that resolves this vulnerability.

    Fixed in 6.8.0-1052.55+fips1
35. Upgrade

    Upgrade linux/Kernel to a version that resolves this vulnerability.

    Fixed in 6.1.191
36. Upgrade

    Upgrade linux/Kernel to a version that resolves this vulnerability.

    Fixed in 6.6.160
37. Upgrade

    Upgrade linux/Kernel to a version that resolves this vulnerability.

    Fixed in 6.12.45
38. Upgrade

    Upgrade linux/Kernel to a version that resolves this vulnerability.

    Fixed in 6.16.5
39. Compensating control

    Update bnxt_en to add helper functions that determine bp->tx_nr_rings and bp->tx_nr_rings_per_tc, and properly scale the TX ring allocations by bp->num_tc in bnxt_set_dflt_rings() and the affected initialization paths to prevent memory corruption in bnxt_alloc_cp_rings().

Event History

Parent advisories

This vulnerability appears in the following advisories.

• DSA-6008

Frequently Asked Questions