PT-2026-2502 · Linux+2 · Linux Kernel+2
Published
2025-12-02
·
Updated
2026-06-16
·
CVE-2025-68770
CVSS v2.0
6.0
Medium
| Vector | AV:L/AC:H/Au:S/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
A flaw exists in the Linux kernel’s bnxt en network driver related to the handling of XDP TX packets. Specifically, the clearing of event flags within the
bnxt rx xdp() function is incorrect, potentially leading to an infinite loop within the NAPI subsystem. This can occur when processing XDP TX actions, particularly in multi-buffer scenarios. If the TX ring lacks available space, the driver may not properly signal the TX doorbell, causing the RX ring to become empty and resulting in packet loss. The issue stems from incorrect flag management, where BNXT TX EVENT and BNXT AGG EVENT flags are not consistently set or cleared, leading to a state where the driver incorrectly perceives pending XDP TX packets. The bnxt poll work() and bnxt rx pkt() functions are involved in the problematic code path.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Race Condition
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Linuxmint
Linux Kernel
Ubuntu