CVE-2025-68197: bnxt_en: Fix null pointer dereference in bnxt_bs_trace_check_wrap()
In the Linux kernel, the following vulnerability has been resolved:
bnxten: Fix null pointer dereference in bnxtbstracecheckwrap()
With older FW, we may get the ASYNCEVENTCMPLEVENTIDDBGBUFPRODUCER for FW trace data type that has not been initialized. This will result in a crash in bnxtbstracetypewrap(). Add a guard to check for a valid magicbyte pointer before proceeding.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Compensating control
Add a guard in bnxt_bs_trace_check_wrap() to validate the magic_byte pointer before proceeding, preventing a null pointer dereference in bnxt_bs_trace_type_wrap().
Event History
Frequently Asked Questions
What is the severity of CVE-2025-68197?
The severity of CVE-2025-68197 is medium, as it involves a potential null pointer dereference in the Linux kernel.
How do I fix CVE-2025-68197?
To fix CVE-2025-68197, update to the latest version of the Linux kernel where the vulnerability has been addressed.
What versions of the Linux kernel are affected by CVE-2025-68197?
CVE-2025-68197 affects older versions of the Linux kernel that do not have the latest firmware updates.
What can happen if CVE-2025-68197 is exploited?
Exploitation of CVE-2025-68197 could potentially lead to a system crash or denial of service due to the null pointer dereference.
Is there a workaround for CVE-2025-68197 before applying a fix?
Currently, there are no effective workarounds recommended for CVE-2025-68197 other than updating the kernel.