Riskcovery

CVE-2025-68197

bnxt_en: Fix null pointer dereference in bnxt_bs_trace_check_wrap()

State
Published
Severity
Not scored
Published
Dec 16, 2025
Updated
May 11, 2026
Reserved
Dec 16, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

bnxt_en: Fix null pointer dereference in bnxt_bs_trace_check_wrap()

With older FW, we may get the ASYNC_EVENT_CMPL_EVENT_ID_DBG_BUF_PRODUCER for FW trace data type that has not been initialized. This will result in a crash in bnxt_bs_trace_type_wrap(). Add a guard to check for a valid magic_byte pointer before proceeding.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 84fcd9449fd7882ddfb05ba64d75f9be2d29b2e9 to before 689ae5ba31293eebb7f21c0ef8939468ac72b5ceAffected
  • 84fcd9449fd7882ddfb05ba64d75f9be2d29b2e9 to before ff02be05f78399c766be68ab0b2285ff90b2aaa8Affected
LinuxLinux
  • 6.13Affected
  • before 6.13Not affected
  • 6.17.8 through 6.17.*Not affected
  • 6.18 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.