GPU VulnDB

Database/Firmware, BMC & network fabric

Linux kernel mlxbf-bootctl (BlueField secure boot fuse state): The BlueField boot-control driver mishandles the sysfs

CVE-2025-37866Firmware, BMC & network fabriccurated

Impact

The BlueField boot-control driver mishandles the sysfs buffer when reporting secure-boot fuse state, producing a kernel warning. Low direct impact, but it sits on the interface an operator uses to verify that a DPU's secure boot fuses are actually burned - if you attest DPU secure-boot state by reading this sysfs node, the reporting path itself was not sound.

Who can reach it

Local on the DPU - triggered by reading the secure_boot_fuse_state sysfs attribute on BlueField.

What to do

Upgrade the DPU Arm-side kernel via a DOCA/BFOS package upgrade or BFB re-image; requires a DPU reset per node. Low urgency on its own - fold it into the next scheduled BFB refresh rather than taking a dedicated window.

References

This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.