CVE-2025-22112

Source
https://cve.org/CVERecord?id=CVE-2025-22112
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-22112.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2025-22112
Downstream
BELL (1)
DEBIAN (1)
MINI (1)
SUSE (3)
UBUNTU (1)
Related
Published
2025-04-16T14:12:58Z
Modified
2026-10-20T10:30:37Z
Summary
eth: bnxt: fix out-of-range access of vnic_info array
Details

In the Linux kernel, the following vulnerability has been resolved:

eth: bnxt: fix out-of-range access of vnic_info array

The bnxt_queue_{start | stop}() access vnic_info as much as allocated, which indicates bp->nr_vnics. So, it should not reach bp->vnic_info[bp->nr_vnics].

Database specific
{
    "cna_assigner":  "Linux",
    "osv_generated_from":  "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/22xxx/CVE-2025-22112.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
a6604717850e4c0fe39bd6084cfbc1bfc445d2b5
Fixed
e1724f07693439deaa413ebc2a2640325cf247f5
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
661958552eda5bf64bfafb4821cbdded935f1f68
Fixed
b1e081d331ab3a0dea25425f2b6ddeb365fc9d22
Fixed
919f9f497dbcee75d487400e8f9815b74a6a37df
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
6.12.20
Fixed
6.12.35
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
6.13.8
Fixed
6.14
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
b730dcab64d5f113af347cf8de696dab6ce88542

Affected versions

v6.*
v6.12.20
v6.12.21
v6.12.22
v6.12.23
v6.12.24
v6.12.25
v6.12.26
v6.12.27
v6.12.28
v6.12.29
v6.12.30
v6.12.31
v6.12.32
v6.12.33
v6.12.34
v6.13.10
v6.13.11
v6.13.12
v6.13.8
v6.13.9

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-22112.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
6.12.35
Type
ECOSYSTEM
Events
Introduced
6.13.0
Fixed
6.14.2

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-22112.json"