In the Linux kernel, the following vulnerability has been resolved:
eth: bnxt: fix out-of-range access of vnic_info array
The bnxtqueue{start | stop}() access vnicinfo as much as allocated, which indicates bp->nrvnics. So, it should not reach bp->vnicinfo[bp->nrvnics].