Linux Kernel Vulnerability in Mellanox Ethernet Drivers

CVE-2025-21800

Summary

A vulnerability exists in the Linux kernel's Mellanox Ethernet drivers specifically related to the HWS_SET32 macro. The issue is triggered when a negative bit offset is used, leading to a shift-out-of-bounds condition reported by Undefined Behavior Sanitizer (UBSAN). This flaw arises from incorrect handling of offsets, which can potentially breach memory boundaries, thereby causing system instability or data corruption. Prompt attention and remediation of this vulnerability are critical for maintaining robust and secure networking operations.

References