CVE-2025-40264

be2net: pass wrb_params in case of OS2BMC

State: Published
Severity: Not scored
Published: Dec 4, 2025
Updated: Jun 2, 2026
Reserved: Apr 16, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

be2net: pass wrb_params in case of OS2BMC

be_insert_vlan_in_pkt() is called with the wrb_params argument being NULL at be_send_pkt_to_bmc() call site. This may lead to dereferencing a NULL pointer when processing a workaround for specific packet, as commit bc0c3405abbb ("be2net: fix a Tx stall bug caused by a specific ipv6 packet") states.

The correct way would be to pass the wrb_params from be_xmit().

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	760c295e0e8d982917d004c9095cff61c0cbd803 to before 48d59b60dd5d7e4c48c077a2008c9dcd7b59bdfeAffected 760c295e0e8d982917d004c9095cff61c0cbd803 to before f499dfa5c98e92e72dd454eb95a1000a448f3405Affected 760c295e0e8d982917d004c9095cff61c0cbd803 to before 630360c6724e27f1aa494ba3fffe1e38c4205284Affected 760c295e0e8d982917d004c9095cff61c0cbd803 to before 012ee5882b1830db469194466a210768ed207388Affected 760c295e0e8d982917d004c9095cff61c0cbd803 to before ce0a3699244aca3acb659f143c9cb1327b210f89Affected 760c295e0e8d982917d004c9095cff61c0cbd803 to before 1ecd86ec6efddb59a10c927e8e679f183bb9113eAffected 760c295e0e8d982917d004c9095cff61c0cbd803 to before 4c4741f6e7f2fa4e1486cb61e1c15b9236ec134dAffected 760c295e0e8d982917d004c9095cff61c0cbd803 to before 7d277a7a58578dd62fd546ddaef459ec24ccae36Affected
LinuxLinux	4.2Affected before 4.2Not affected 5.4.302 through 5.4.Not affected 5.10.247 through 5.10.Not affected 5.15.197 through 5.15.Not affected 6.1.159 through 6.1.Not affected 6.6.118 through 6.6.Not affected 6.12.60 through 6.12.Not affected 6.17.10 through 6.17.*Not affected 6.18 and laterNot affected

Product

Versions

LinuxLinux

760c295e0e8d982917d004c9095cff61c0cbd803 to before 48d59b60dd5d7e4c48c077a2008c9dcd7b59bdfeAffected
760c295e0e8d982917d004c9095cff61c0cbd803 to before f499dfa5c98e92e72dd454eb95a1000a448f3405Affected
760c295e0e8d982917d004c9095cff61c0cbd803 to before 630360c6724e27f1aa494ba3fffe1e38c4205284Affected
760c295e0e8d982917d004c9095cff61c0cbd803 to before 012ee5882b1830db469194466a210768ed207388Affected
760c295e0e8d982917d004c9095cff61c0cbd803 to before ce0a3699244aca3acb659f143c9cb1327b210f89Affected
760c295e0e8d982917d004c9095cff61c0cbd803 to before 1ecd86ec6efddb59a10c927e8e679f183bb9113eAffected
760c295e0e8d982917d004c9095cff61c0cbd803 to before 4c4741f6e7f2fa4e1486cb61e1c15b9236ec134dAffected
760c295e0e8d982917d004c9095cff61c0cbd803 to before 7d277a7a58578dd62fd546ddaef459ec24ccae36Affected

LinuxLinux

4.2Affected
before 4.2Not affected
5.4.302 through 5.4.*Not affected
5.10.247 through 5.10.*Not affected
5.15.197 through 5.15.*Not affected
6.1.159 through 6.1.*Not affected
6.6.118 through 6.6.*Not affected
6.12.60 through 6.12.*Not affected
6.17.10 through 6.17.*Not affected
6.18 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.