CVE-2025-40330

A flaw was found in the Linux kernel's Broadcom NetXtreme-C/E (bnxt_en) network driver. During system shutdown via bnxt_shutdown(), only packet DMA is stopped through netif_close(), but firmware DMA operations for trace logging continue. If the system performs a kexec to boot a new kernel, the ongoing firmware DMA writes corrupt memory in the new kernel, potentially leading to system crashes, data corruption, or security vulnerabilities in the newly booted kernel.

This vulnerability affects systems using Broadcom NetXtreme-C/E network adapters that perform kexec operations. The memory corruption occurs during the transition to a new kernel, making this particularly relevant for systems that rely on kexec for fast reboots or crash dump collection.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

To mitigate this issue, prevent the bnxt_en module from being loaded if Broadcom NetXtreme-C/E network adapters are not required. See https://access.redhat.com/solutions/41278 for instructions on how to blacklist a kernel module.