CVE-2025-71092: RDMA/bnxt_re: Fix OOB write in bnxt_re_copy_err_stats()
In the Linux kernel, the following vulnerability has been resolved:
RDMA/bnxtre: Fix OOB write in bnxtrecopyerrstats()
Commit ef56081d1864 ("RDMA/bnxtre: RoCE related hardware counters update") added three new counters and placed them after BNXTREOUTOFSEQERR.
BNXTREOUTOFSEQERR acts as a boundary marker for allocating hardware statistics with different numcounters values on chipgenp5p7 devices.
As a result, BNXTRENUMSTDCOUNTERS are used when allocating hwstats, which leads to an out-of-bounds write in bnxtrecopyerrstats().
The counters BNXTREREQCQEERROR, BNXTRERESPCQEERROR, and BNXTRERESPREMOTEACCESSERRS are applicable to generic hardware, not only p5/p7 devices.
Fix this by moving these counters before BNXTREOUTOFSEQERR so they are included in the generic counter set.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-71092?
CVE-2025-71092 is classified as a high severity vulnerability due to the potential for out-of-bounds write which could lead to system instability or unauthorized access.
How do I fix CVE-2025-71092?
To fix CVE-2025-71092, ensure that your Linux kernel is updated to the latest stable version that includes the patch for this vulnerability.
What systems are affected by CVE-2025-71092?
CVE-2025-71092 affects systems running the Linux kernel that utilize RDMA/bnxt_re functionalities.
What type of vulnerability is CVE-2025-71092?
CVE-2025-71092 is an out-of-bounds write vulnerability that can compromise the security and stability of affected systems.
What are the potential impacts of CVE-2025-71092?
The potential impacts of CVE-2025-71092 include system crashes, data corruption, and unauthorized access due to memory corruption.