What’s Vulnerable › Vulnerabilities

CVE-2025-21901: RDMA/bnxt_re: Add sanity checks on rdev validity

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-04-01 · updated 2026-07-30
• Weakness: CWE-476

Description

In the Linux kernel, the following vulnerability has been resolved: RDMA/bnxt_re: Add sanity checks on rdev validity There is a possibility that ulp_irq_stop and ulp_irq_start callbacks will be called when the device is in detached state. This can cause a crash due to NULL pointer dereference as the rdev is already freed.

Affected products

• Linux kernel: from 6.12 before 6.12.18; from 6.13 before 6.13.6; 6.14-rc1, 6.14-rc2, 6.14-rc3, 6.14-rc4 — fixed in 6.12.18, 6.13.6

How to fix

Upgrade to a fixed version: Linux kernel 6.12.18, 6.13.6. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/8cb0eef46d70a99c88c26a1addb7fd955242e0e6
• https://git.kernel.org/stable/c/aed1bc673907e3df372b317c10ff2f3582f8bf1a
• https://git.kernel.org/stable/c/f0df225d12fcb049429fb5bf5122afe143c2dd15

Get alerted when CVE-2025-21901 or the next vulnerability affects your stack