CVE-2025-21974

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.14.0-rc2+

Description A vulnerability in the Linux kernel has been resolved, related to the bnxt queue mem alloc() function. This function is called to allocate new queue memory when a queue is restarted. If the queue is restarted while the interface is down, a kernel panic occurs due to the rx buffer descriptor being freed when the interface is down. The issue is triggered when the bnxt queue mem alloc() function internally accesses the rx buffer descriptor corresponding to the index.

Recommendations For Linux kernel versions prior to 6.14.0-rc2+, update to a version that includes the fix for this issue to prevent kernel panic when restarting a queue while the interface is down. As a temporary workaround, consider disabling the queue restart functionality when the interface is down to minimize the risk of exploitation.