CVE-2025-21973

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.14.0-rc4+

Description A vulnerability in the Linux kernel has been resolved, which caused a kernel panic in the bnxt get queue stats{rx | tx} function. This issue occurred when the qstats-get operation was executed while the interface was down, and the function accessed the cp ring and tx ring without a null check. The vulnerability can be reproduced by setting the interface down and executing the qstats-get operation.

Recommendations For Linux kernel versions prior to 6.14.0-rc4+, update to a newer version to resolve the issue. As a temporary workaround, consider avoiding the qstats-get operation when the interface is down to prevent the kernel panic.