CVE-2025-71137

In the Linux kernel, the following vulnerability has been resolved:

octeontx2-pf: fix "UBSAN: shift-out-of-bounds error"

This patch ensures that the RX ring size (rx_pending) is not set below the permitted length. This avoids UBSAN shift-out-of-bounds errors when users passes small or zero ring sizes via ethtool -G.

This issue is caused by missing validation of the RX ring size supplied via ethtool, allowing too small values to reach shift operations and trigger shift-out-of-bounds conditions. The impact is limited to local privileged users and results in kernel warnings or potential crashes, making it a stability and robustness issue. No memory corruption or privilege escalation is possible.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.