CVE-2024-42148

A vulnerability was found in the Linux kernel's broadcom bnx2x driver where the limit on the stats_query_entry array's size is too small and can lead to array-index-out-of-bounds errors if the user defines a higher number of Ethernet queues than the driver can handle or the system has 32+ CPU cores. This can lead to system instability or crashes.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.