Shift-Out-of-Bounds Vulnerability in Linux Kernel Affecting Networking

CVE-2025-71137

What is CVE-2025-71137?

A vulnerability has been identified in the Linux kernel related to the RX ring size management for the octeontx2-pf network driver. This flaw allows the RX ring size to be incorrectly set to values below the permissible length. When users input small or zero values via ethtool -G, it triggers a UBSAN (Undefined Behavior Sanitizer) shift-out-of-bounds error. This issue underscores the importance of validating input parameters to ensure the stability and reliability of network operations.

References