Security tracker / CVE-2025-21682

CVE-2025-21682

eth: bnxt: always recalculate features after XDP clearing, fix null-deref

References

• Debian security tracker
• cve.org

Notes

 carnil> Introduced in 1054aee82321 ("bnxt_en: Use NETIF_F_GRO_HW.")
 carnil> 98ba1d931f61 ("bnxt_en: Fix RSS logic in __bnxt_reserve_rings()"). Vulnerable
 carnil> versions: 4.16-rc1.

Bugs

Status

Branch	Status
upstream	released (6.13) [f0aa6a37a3dbb40b272df5fc6db93c114688adcd]
6.18-upstream-stable	N/A "Fixed before branching point"
6.17-upstream-stable	N/A "Fixed before branching point"
6.12-upstream-stable	released (6.12.11) [08831a894d18abfaabb5bbde7c2069a7fb41dd93]
6.6-upstream-stable	needed
6.1-upstream-stable	needed
5.10-upstream-stable	needed
sid	released (6.12.11-1)
6.12-trixie-security	N/A "Fixed before branching point"
6.1-bookworm-security	needed
5.10-bullseye-security	needed