DMA Memory Corruption Vulnerability in Linux Kernel Related to bnxt_en Driver

CVE-2025-40330

What is CVE-2025-40330?

A vulnerability in the bnxt_en driver of the Linux kernel can lead to memory corruption due to improper management of DMA operations during the shutdown process. When the netif_close() function is called in bnxt_shutdown(), while packet DMA is halted, firmware DMA related to trace logging may continue running. This ongoing DMA can result in memory corruption if the system is kexec'd to a new kernel. To mitigate the risk, the bnxt_hwrm_func_drv_unrgtr() function has been introduced to unregister the driver from the firmware, with additional measures such as pcie_flr() to reset the function if unregistration fails.

References