Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2025-22112

eth: bnxt: fix out-of-range access of vnic_info array

Description

In the Linux kernel, the following vulnerability has been resolved: eth: bnxt: fix out-of-range access of vnic_info array The bnxt_queue_{start | stop}() access vnic_info as much as allocated, which indicates bp->nr_vnics. So, it should not reach bp->vnic_info[bp->nr_vnics].

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • a6604717850e4c0fe39bd6084cfbc1bfc445d2b5 to < e1724f07693439deaa413ebc2a2640325cf247f5affected
  • 661958552eda5bf64bfafb4821cbdded935f1f68 to < b1e081d331ab3a0dea25425f2b6ddeb365fc9d22affected
  • 661958552eda5bf64bfafb4821cbdded935f1f68 to < 919f9f497dbcee75d487400e8f9815b74a6a37dfaffected
  • b730dcab64d5f113af347cf8de696dab6ce88542affected
  • 6.12.20 to < 6.12.35affected
  • 6.13.8 to < 6.14affected

Linux Linux

Default version status: affected

  • 6.14affected
  • 0 to < 6.14unaffected
  • 6.12.35 to ≤ 6.12.*unaffected
  • 6.14.2 to ≤ 6.14.*unaffected
  • 6.15 to ≤ *unaffected

References