CVE-2025-21960

A flaw was found in the Linux kernel's Broadcom NetXtreme (bnxt) ethernet driver. When processing network packets with eXpress Data Path (XDP) and hardware checksum offload enabled, the driver redundantly updates internal packet checksum state flags. An attacker could exploit this by sending network traffic to the system, triggering an internal kernel assertion warning that may lead to system instability or a Denial of Service (DoS).

The bug is actual only if XDP (eXpress Data Path) that is an eBPF-based high-performance network data path being used. The bug doesn't lead to kernel crash, so only about annoying warning message.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

To mitigate this issue, prevent module bnxt_en from being loaded. Please see https://access.redhat.com/solutions/41278 for how to blacklist a kernel module to prevent it from loading automatically.