List Corruption in Linux Kernel Affecting bnxt Driver

CVE-2025-38246

What is CVE-2025-38246?

A vulnerability in the Linux kernel's bnxt driver has been identified that can lead to list corruption during the execution of the XDP_REDIRECT feature. This issue manifests in a crash scenario where the linked list's integrity is compromised, causing unexpected behaviors and instability within the system. When triggered, the kernel outputs an error related to list_add corruption, indicating that the next pointer's previous reference does not match expectations. This flaw poses risks, particularly in production environments utilizing advanced networking features.

References