Home

Description

In the Linux kernel, the following vulnerability has been resolved: eth: bnxt: fix out-of-range access of vnic_info array The bnxt_queue_{start | stop}() access vnic_info as much as allocated, which indicates bp->nr_vnics. So, it should not reach bp->vnic_info[bp->nr_vnics].

PUBLISHED Reserved 2024-12-29 | Published 2025-04-16 | Updated 2026-05-23 | Assigner Linux

Product status

Default status
unaffected

a6604717850e4c0fe39bd6084cfbc1bfc445d2b5 (git) before e1724f07693439deaa413ebc2a2640325cf247f5
affected

661958552eda5bf64bfafb4821cbdded935f1f68 (git) before b1e081d331ab3a0dea25425f2b6ddeb365fc9d22
affected

661958552eda5bf64bfafb4821cbdded935f1f68 (git) before 919f9f497dbcee75d487400e8f9815b74a6a37df
affected

b730dcab64d5f113af347cf8de696dab6ce88542 (git)
affected

6.12.20 (semver) before 6.12.35
affected

6.13.8 (semver) before 6.14
affected

Default status
affected

6.14
affected

Any version before 6.14
unaffected

6.12.35 (semver)
unaffected

6.14.2 (semver)
unaffected

6.15 (original_commit_for_fix)
unaffected

References

git.kernel.org/...c/e1724f07693439deaa413ebc2a2640325cf247f5

git.kernel.org/...c/b1e081d331ab3a0dea25425f2b6ddeb365fc9d22

git.kernel.org/...c/919f9f497dbcee75d487400e8f9815b74a6a37df

cve.org (CVE-2025-22112)

nvd.nist.gov (CVE-2025-22112)

Download JSON