Linux Kernel Security Flaw in be2net Driver

CVE-2025-40264

What is CVE-2025-40264?

A vulnerability in the be2net driver of the Linux kernel could result in dereferencing a NULL pointer, potentially causing instability in network packet processing. Specifically, the function be_insert_vlan_in_pkt() was invoked with NULL wrb_params at the be_send_pkt_to_bmc() site, which violates proper parameter handling protocols. The designated fix recommends passing correct parameters from be_xmit() to prevent this issue, addressing a flaw reported in commit bc0c3405abbb that pertains to a specific IPv6 packet anomaly.

References