CVE-2025-40264

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A flaw exists in the Linux kernel's be2net component where the be insert vlan in pkt() function is called with a NULL wrb params argument at the be send pkt to bmc() call site. This can lead to a NULL pointer dereference when processing certain packets, specifically related to a workaround for a specific IPv6 packet as addressed by commit bc0c3405abbb. The issue occurs when handling OS2BMC scenarios.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.