CVE-2025-37873

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2025-37873
In the Linux kernel, the following vulnerability has been resolved: eth: bnxt: fix missing ring index trim on error path Commit under Fixes converted tx_prod to be free running but missed masking it on the Tx error path. This crashes on error conditions, for example when DMA mapping fails.

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/12f2d033fae957d84c2c0ce604d2a077e61fa2c0 Patch
https://git.kernel.org/stable/c/21e70f694bc0dcb40174b0940cc52a7769fc19e0 Patch
https://git.kernel.org/stable/c/3742c55de00266fa7c8fd2c5d61a453d223a9cd1 Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.15:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.15:rc2:*:*:*:*:*:*
History

12 Nov 2025, 19:51

Type Values Removed Values Added
References () https://git.kernel.org/stable/c/12f2d033fae957d84c2c0ce604d2a077e61fa2c0 - () https://git.kernel.org/stable/c/12f2d033fae957d84c2c0ce604d2a077e61fa2c0 - Patch
References () https://git.kernel.org/stable/c/21e70f694bc0dcb40174b0940cc52a7769fc19e0 - () https://git.kernel.org/stable/c/21e70f694bc0dcb40174b0940cc52a7769fc19e0 - Patch
References () https://git.kernel.org/stable/c/3742c55de00266fa7c8fd2c5d61a453d223a9cd1 - () https://git.kernel.org/stable/c/3742c55de00266fa7c8fd2c5d61a453d223a9cd1 - Patch
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
CWE NVD-CWE-noinfo
First Time Linux
Linux linux Kernel
CPE cpe:2.3:o:linux:linux_kernel:6.15:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.15:rc2:*:*:*:*:*:*

12 May 2025, 17:32

Type Values Removed Values Added
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: eth: bnxt: se corrige la falta de recorte del índice de anillo en la ruta de error. La confirmación bajo "Correcciones" convirtió tx_prod para que se ejecutara libremente, pero no lo enmascaró en la ruta de error de Tx. Esto falla en condiciones de error, por ejemplo, cuando falla la asignación de DMA.

09 May 2025, 07:16

Type Values Removed Values Added
New CVE
Information

Published : 2025-05-09 07:16

Updated : 2025-11-12 19:51

NVD link : CVE-2025-37873

Mitre link : CVE-2025-37873

CVE.ORG link : CVE-2025-37873

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
NVD-CWE-noinfo