PT-2025-49783 · Linux+3 · Linux Kernel+3

Published

2025-12-09

·

Updated

2026-02-24

·

CVE-2025-40330

None

No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description The Linux kernel contains a flaw where Firmware (FW) DMA may continue during shutdown, even after packet DMA has been stopped. This occurs because the netif close() call within the bnxt shutdown() function only halts packet DMA, leaving FW DMA for trace logging active. If the system kexecs to a new kernel, this ongoing FW DMA can corrupt memory in the new kernel. The issue is addressed by adding bnxt hwrm func drv unrgtr() to unregister the driver from the FW, stopping the FW DMA. If this unregistration fails, pcie flr() is called to reset the function and halt the DMA.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Found an issue in the description? Have something to add? Feel free to write us 👾

Related Identifiers

CVE-2025-40330
OPENSUSE-SU-2026:20145-1
SUSE-SU-2026:0278-1
SUSE-SU-2026:0281-1
SUSE-SU-2026:0315-1
SUSE-SU-2026:20207-1
SUSE-SU-2026:20220-1
SUSE-SU-2026:20228-1
USN-8029-1
USN-8029-2
USN-8029-3
USN-8030-1
USN-8048-1

Affected Products

Linuxmint
Linux Kernel
Ubuntu
Bnxt