GPU VulnDB

Database/Firmware, BMC & network fabric

Linux bnxt_en driver (bnxt_fill_hw_rss_tbl): Memory out-of-bounds in the RSS indirection-table path of the Broadcom NIC

CVE-2024-44933Firmware, BMC & network fabriccurated

Impact

Memory out-of-bounds in the RSS indirection-table path of the Broadcom NIC driver, giving kernel panic, denial of service, or an information leak out of kernel memory. The information-leak arm is the one that matters for multi-tenancy — kernel memory on a shared host contains other workloads' data.

Who can reach it

Reachable through ring-reservation and RSS configuration paths in the driver; local host privilege or specific traffic conditions depending on the trigger.

What to do

Kernel/driver upgrade and host reboot. Rolling across the fleet during normal maintenance; no firmware flash needed.

References

This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.