cve 2025 39810

CVE-2025-39810 is a kernel-level vulnerability in the Broadcom NetXtreme II network driver (bnxt_en) that can cause memory corruption when firmware resources change. Microsoft's initial advisory names Azure Linux as the Microsoft product that explicitly ships the affected open-source component, but this is an initial mapping and not a guarantee that Azure Linux is the only Microsoft product at risk. Discussions on WindowsForum.com explore the scope of the vulnerability, emphasizing that other Microsoft products may also include the vulnerable library or carrier kernel code. Users and experts analyze the implications for enterprise IT environments and the importance of patching.