A critical memory-accounting bug in the Broadcom/NetXtreme-E (bnxt) Ethernet driver’s XDP-to-SKB conversion path can cause kernel crashes and service outages: CVE-2025-21961 is a truesize miscalculation in the bnxt XDP-MB (mb-xdp) pass case that leads to skb memory-accounting errors and kernel...
A subtle driver-state bug in Broadcom’s bnxt Ethernet driver has been assigned CVE-2025-21682 after maintainers fixed a race and a NULL-pointer dereference that can lead to kernel crashes when XDP programs are detached and subsequent reconfiguration occurs. Systems that attach and remove XDP...