CVE-2025-71137: octeontx2-pf: fix "UBSAN: shift-out-of-bounds error"
In the Linux kernel, the following vulnerability has been resolved:
octeontx2-pf: fix "UBSAN: shift-out-of-bounds error"
This patch ensures that the RX ring size (rxpending) is not set below the permitted length. This avoids UBSAN shift-out-of-bounds errors when users passes small or zero ring sizes via ethtool -G.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2025-71137?
CVE-2025-71137 is classified as a moderate severity vulnerability in the Linux kernel.
How do I fix CVE-2025-71137?
To fix CVE-2025-71137, ensure that you apply the latest patch provided by the Linux kernel maintainers.
What does CVE-2025-71137 affect?
CVE-2025-71137 affects the RX ring size handling in the octeontx2-pf driver of the Linux kernel.
What kind of error does CVE-2025-71137 address?
CVE-2025-71137 addresses a shift-out-of-bounds error reported by UBSAN.
When was CVE-2025-71137 disclosed?
CVE-2025-71137 was disclosed in 2025 as part of a patch to improve kernel robustness.