CVE-2025-40330
Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
09/12/2025
Last modified:
09/12/2025
Description
In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
bnxt_en: Shutdown FW DMA in bnxt_shutdown()<br />
<br />
The netif_close() call in bnxt_shutdown() only stops packet DMA. There<br />
may be FW DMA for trace logging (recently added) that will continue. If<br />
we kexec to a new kernel, the DMA will corrupt memory in the new kernel.<br />
<br />
Add bnxt_hwrm_func_drv_unrgtr() to unregister the driver from the FW.<br />
This will stop the FW DMA. In case the call fails, call pcie_flr() to<br />
reset the function and stop the DMA.



