Description
In the Linux kernel, the following vulnerability has been resolved: be2net: pass wrb_params in case of OS2BMC be_insert_vlan_in_pkt() is called with the wrb_params argument being NULL at be_send_pkt_to_bmc() call site. This may lead to dereferencing a NULL pointer when processing a workaround for specific packet, as commit bc0c3405abbb ("be2net: fix a Tx stall bug caused by a specific ipv6 packet") states. The correct way would be to pass the wrb_params from be_xmit().
References (8)
Core 8
Core References
Scores
EPSS
0.0006
EPSS Percentile
18.3%
Details
Status
published
Products (25)
linux/Kernel
4.2.0 - 5.4.302linux
linux/Kernel
5.11.0 - 5.15.197linux
linux/Kernel
5.16.0 - 6.1.159linux
linux/Kernel
5.5.0 - 5.10.247linux
linux/Kernel
6.13.0 - 6.17.10linux
linux/Kernel
6.2.0 - 6.6.118linux
linux/Kernel
6.7.0 - 6.12.60linux
Linux/Linux
< 4.2
Linux/Linux
4.2
Linux/Linux
5.10.247 - 5.10.*
... and 15 more
Published
Dec 04, 2025
Tracked Since
Feb 18, 2026