CVE-2025-22112

Description

In the Linux kernel, the following vulnerability has been resolved: eth: bnxt: fix out-of-range access of vnic_info array The bnxt_queue_{start | stop}() access vnic_info as much as allocated, which indicates bp->nr_vnics. So, it should not reach bp->vnic_info[bp->nr_vnics].

Reserved 2024-12-29 | Published 2025-04-16 | Updated 2025-05-26 | Assigner Linux

Product status

Default status
unaffected

661958552eda5bf64bfafb4821cbdded935f1f68 before b1e081d331ab3a0dea25425f2b6ddeb365fc9d22
affected

661958552eda5bf64bfafb4821cbdded935f1f68 before 919f9f497dbcee75d487400e8f9815b74a6a37df
affected

a6604717850e4c0fe39bd6084cfbc1bfc445d2b5
affected

b730dcab64d5f113af347cf8de696dab6ce88542
affected

Default status
affected

6.14
affected

Any version before 6.14
unaffected

6.14.2
unaffected

6.15
unaffected

References

git.kernel.org/...c/b1e081d331ab3a0dea25425f2b6ddeb365fc9d22

git.kernel.org/...c/919f9f497dbcee75d487400e8f9815b74a6a37df

cve.org (CVE-2025-22112)

nvd.nist.gov (CVE-2025-22112)

Download JSON