Database/Firmware, BMC & network fabric
Linux kernel mlxbf-bootctl (BlueField secure boot fuse state): The BlueField boot-control driver mishandles the sysfs
Impact
The BlueField boot-control driver mishandles the sysfs buffer when reporting secure-boot fuse state, producing a kernel warning. Low direct impact, but it sits on the interface an operator uses to verify that a DPU's secure boot fuses are actually burned - if you attest DPU secure-boot state by reading this sysfs node, the reporting path itself was not sound.
Who can reach it
Local on the DPU - triggered by reading the secure_boot_fuse_state sysfs attribute on BlueField.
What to do
Upgrade the DPU Arm-side kernel via a DOCA/BFOS package upgrade or BFB re-image; requires a DPU reset per node. Low urgency on its own - fold it into the next scheduled BFB refresh rather than taking a dedicated window.
References
Related entries
- libtpms (CryptHmacSign, vTPM): Out-of-bounds read when signKey and signScheme are mismatched, aborting the vTPMCVE-2025-49133 · libtpms (CryptHmacSign, vTPM)Unscored
- Juniper Junos OS / Junos OS Evolved (rpd BGP session handling): A genuine, valid BGP UPDATE message resets a live BGPCVE-2025-52953 · Juniper Junos OS / Junos OS Evolved (rpd BGP session handling)Unscored
- Juniper Junos OS / Junos OS Evolved (annotate configuration command): The `annotate` configuration command can be usedCVE-2025-52989 · Juniper Junos OS / Junos OS Evolved (annotate configuration command)Unscored
- Juniper Junos OS (QFX5000-Series, EX4600-Series): A physical-access path into affected QFX5000 and EX4600 switchesCVE-2025-59957 · Juniper Junos OS (QFX5000-Series, EX4600-Series)Unscored
- Juniper Junos OS Evolved (QFX5000 / PTX, multicast packet handling): Crafted multicast packets crash and restartCVE-2025-59969 · Juniper Junos OS Evolved (QFX5000 / PTX, multicast packet handling)Unscored
- ASPEED crypto/ACRY accelerator driver (drivers/crypto/aspeed): The ACRY driver's probe error path and its remove pathCVE-2025-68172 · ASPEED crypto/ACRY accelerator driver (drivers/crypto/aspeed)Unscored
This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.