CVE-2025-37873

CVE-2025-37873

High · published May 9, 2025

CVSS v3.1
7.8
EPSS
0%
Percentile
19.1
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

eth: bnxt: fix missing ring index trim on error path

Commit under Fixes converted tx_prod to be free running but missed

masking it on the Tx error path. This crashes on error conditions,

for example when DMA mapping fails.

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00277 · 19.1th percentile
Published
2025-05-09T11:16Z
Affected products (4)
ProductVersionsFixed in
linux/linux_kernel≥ 6.8, < 6.12.256.12.25
linux/linux_kernel≥ 6.13, < 6.14.46.14.4
linux/linux_kernelall versions—
linux/linux_kernelall versions—
References (3)
https://git.kernel.org/stable/c/12f2d033fae957d84c2c0ce604d2a077e61fa2c0 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/21e70f694bc0dcb40174b0940cc52a7769fc19e0 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/3742c55de00266fa7c8fd2c5d61a453d223a9cd1 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67
EPSS history
Timeline
  • 09 MAY 06:44Z
    eth: bnxt: fix missing ring index trim on error path
    cvelistv5