GPU VulnDB

Database/Firmware, BMC & network fabric

Linux bnxt_en driver (ring defaults vs traffic classes on ifdown): Memory corruption when firmware resources change

CVE-2025-39810Firmware, BMC & network fabriccurated

Impact

Memory corruption when firmware resources change while the interface is down, because the default-ring calculation assumes no traffic classes have been created. Relevant to RoCE clusters specifically: traffic classes are how you carve out lossless queues for RDMA with PFC, so any cluster running RoCEv2 with DCB has traffic classes configured and is in the affected configuration by construction.

Who can reach it

Local — an interface down/up cycle combined with a firmware resource change, on a host with traffic classes configured.

What to do

Kernel/driver upgrade plus host reboot. Until then, avoid ifdown/ifup cycles on RoCE-configured Broadcom interfaces as a routine operational step — use link-level draining at the switch instead.

References

This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.