CVE-2025-40330

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The Linux kernel contains a flaw where Firmware (FW) DMA may continue during shutdown, even after packet DMA has been stopped. This occurs because the netif close() call within the bnxt shutdown() function only halts packet DMA, leaving FW DMA for trace logging active. If the system kexecs to a new kernel, this ongoing FW DMA can corrupt memory in the new kernel. The issue is addressed by adding bnxt hwrm func drv unrgtr() to unregister the driver from the FW, stopping the FW DMA. If this unregistration fails, pcie flr() is called to reset the function and halt the DMA.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.