CVE-2025-40330: bnxt_en: Shutdown FW DMA in bnxt_shutdown()
In the Linux kernel, the following vulnerability has been resolved:
bnxten: Shutdown FW DMA in bnxtshutdown()
The netifclose() call in bnxtshutdown() only stops packet DMA. There may be FW DMA for trace logging (recently added) that will continue. If we kexec to a new kernel, the DMA will corrupt memory in the new kernel.
Add bnxthwrmfuncdrvunrgtr() to unregister the driver from the FW. This will stop the FW DMA. In case the call fails, call pcieflr() to reset the function and stop the DMA.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Compensating control
In bnxt_shutdown(), call bnxt_hwrm_func_drv_unrgtr() to unregister the driver from firmware and stop firmware DMA; if the call fails, call pcie_flr() to reset the function and stop the DMA.
Event History
Frequently Asked Questions
What is the severity of CVE-2025-40330?
CVE-2025-40330 has been classified with a medium severity due to potential exposure to unauthorized access through unhandled firmware DMA.
How do I fix CVE-2025-40330?
To fix CVE-2025-40330, update your Linux kernel to the latest stable version where this vulnerability has been patched.
What components are affected by CVE-2025-40330?
CVE-2025-40330 affects the bnxt_en driver within the Linux kernel network subsystem.
Can CVE-2025-40330 be exploited remotely?
Yes, CVE-2025-40330 can potentially be exploited remotely if the affected kernel is used in a networked environment.
What are the potential consequences of CVE-2025-40330?
The potential consequences of CVE-2025-40330 include unauthorized access to system logs and possibly further exploitation of the system.