Vulnerability details

CVE-2025-37873

Linux Linux

eth: bnxt: fix missing ring index trim on error path

CVSS 3.1
7.8High

Official description

In the Linux kernel, the following vulnerability has been resolved: eth: bnxt: fix missing ring index trim on error path Commit under Fixes converted tx_prod to be free running but missed masking it on the Tx error path. This crashes on error conditions, for example when DMA mapping fails.

CVSS scores

ScoreVersionSourceVector
7.8High 3.1 CVEProject cvelistV5 (CNA) (Linux) CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

VendorProductVersionsSource
Linux Linux 6.8 CVEProject cvelistV5 (CNA)
Linux Linux 6d1add95536bafe585c500ad8114af7ed4225a0f ≤ v < 21e70f694bc0dcb40174b0940cc52a7769fc19e0 CVEProject cvelistV5 (CNA)
Linux Linux 6d1add95536bafe585c500ad8114af7ed4225a0f ≤ v < 3742c55de00266fa7c8fd2c5d61a453d223a9cd1 CVEProject cvelistV5 (CNA)
Linux Linux 6d1add95536bafe585c500ad8114af7ed4225a0f ≤ v < 12f2d033fae957d84c2c0ce604d2a077e61fa2c0 CVEProject cvelistV5 (CNA)

References and advisories

3
Kolun on Telegram @kolunsec Exploited CVEs, key news and a daily digest Alerts for this product's next CVEsFollow the product to get new vulnerabilities on Telegram.

Details

Published
2025-05-09
Last updated
2026-10-16
State
Published
Assigner (CNA)
Linux

Exploit prediction (EPSS)

0.27%
Probability of exploitation in 30 days
20.1%
Percentile (among all CVEs)

SSVC assessment (CISA)

Automatable
No
Exploitation
None
Technical impact
Total

Weaknesses (CWE)

  • —