CVE-2025-37873
kernel: eth: bnxt: fix missing ring index trim on error path
Severity
ModerateRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · May 9, 2025
Updated · October 30, 2026
Description
In the Linux kernel, the following vulnerability has been resolved:
eth: bnxt: fix missing ring index trim on error path
Commit under Fixes converted tx_prod to be free running but missed masking it on the Tx error path. This crashes on error conditions, for example when DMA mapping fails.
Statement
This vulnerability is rated as Moderate because it is limited to a denial of service and strictly requires the host to have Broadcom NetXtreme network hardware managed by the bnxt_en driver. Systems lacking these specific physical network adapters or environments that do not load the driver module are unaffected. The crash occurs only during transmit failure conditions, such as DMA mapping failures, and cannot be leveraged for unauthorized data access or privilege escalation.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.1 · 5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CWE-772 · Missing Release of Resource after Effective Lifetime