CVE-2025-37873

MEDIUM

Linux Kernel - Denial of Service via Missing Ring Index Trim on Tx Error Path

Title source: llm

Description

In the Linux kernel, the following vulnerability has been resolved: eth: bnxt: fix missing ring index trim on error path Commit under Fixes converted tx_prod to be free running but missed masking it on the Tx error path. This crashes on error conditions, for example when DMA mapping fails.

References (3)

Core 3

Core References

Patch

https://git.kernel.org/stable/c/21e70f694bc0dcb40174b0940cc52a7769fc19e0

Patch

https://git.kernel.org/stable/c/3742c55de00266fa7c8fd2c5d61a453d223a9cd1

Patch

https://git.kernel.org/stable/c/12f2d033fae957d84c2c0ce604d2a077e61fa2c0

Scores

CVSS v3 5.5

EPSS 0.0023

EPSS Percentile 13.7%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Details

Status published

Products (12)

linux/Kernel 6.13.0 - 6.14.4linux

linux/Kernel 6.8.0 - 6.12.25linux

Linux/Linux < 6.8

Linux/Linux 6.12.25 - 6.12.*

Linux/Linux 6.14.4 - 6.14.*

Linux/Linux 6.15

Linux/Linux 6.8

Linux/Linux 6d1add95536bafe585c500ad8114af7ed4225a0f - 12f2d033fae957d84c2c0ce604d2a077e61fa2c0

Linux/Linux 6d1add95536bafe585c500ad8114af7ed4225a0f - 21e70f694bc0dcb40174b0940cc52a7769fc19e0

Linux/Linux 6d1add95536bafe585c500ad8114af7ed4225a0f - 3742c55de00266fa7c8fd2c5d61a453d223a9cd1

... and 2 more

Published May 09, 2025

Tracked Since Feb 18, 2026