PT-2025-14341 · Linux+6 · Linux Kernel+6
Published
2025-03-09
·
Updated
2026-04-20
·
CVE-2025-21960
CVSS v2.0
6.2
Medium
| Vector | AV:A/AC:H/Au:N/C:N/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
Linux kernel versions prior to 6.14.0-rc4+
Description
A vulnerability in the Linux kernel has been resolved, related to the bnxt driver. The issue arises when the XDP-MB program is attached and returns XDP PASS, causing the bnxt xdp build skb() function to update the skb shared info, which includes updating the ip summed value if checksum offload is enabled. However, this update is unnecessary and can lead to warnings. The vulnerability is caused by duplicate work in updating the ip summed value.
Recommendations
For Linux kernel versions prior to 6.14.0-rc4+, update the kernel to a version that includes the fix for this issue. As a temporary workaround, consider disabling the XDP-MB program or restricting its use to minimize the risk of exploitation. Additionally, avoid using the
ip summed variable in the affected API endpoints until the issue is resolved.Exploit
Fix
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Astra Linux
Debian
Linuxmint
Linux Kernel
Red Os
Suse
Ubuntu