{"id":"CVE-2025-22108","title":"In the Linux kernel, the following vulnerability has been resolved:\n\nbnxt_en: Mask the bd_cnt field in the TX BD properly\n\nThe bd_cnt field in the TX BD specifies the total number of BDs for\nthe TX packet","summary":"In the Linux kernel, the following vulnerability has been resolved:\n\nbnxt_en: Mask the bd_cnt field in the TX BD properly\n\nThe bd_cnt field in the TX BD specifies the total number of BDs for\nthe TX packet.  The bd_cnt field has 5 bits an…","severity":"high","cvss":8.6,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H","vendor":"linux","product":"linux_kernel","affected":["linux_kernel >= 6.4, < 6.14.2"],"patched":["linux_kernel 6.14.2"],"published":"2025-04-16","updated":"2026-09-07","sourceUpdated":"2026-09-07T16:17:27.353","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2025-22108","references":[{"url":"https://git.kernel.org/stable/c/107b25db61122d8f990987895c2912927b8b6e3f","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/9ee185e0f15594017a6f1a191ebe6630cfea5f74","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/f60b41b815826f15c4d0323f923f398c423178d0","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"}],"tags":["nvd","cve.org"],"epss":0.00359,"epssPercentile":0.29764,"ingestedAt":"2026-09-07T17:14:49.477Z","slug":"CVE-2025-22108","body":"## Overview\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nbnxt_en: Mask the bd_cnt field in the TX BD properly\n\nThe bd_cnt field in the TX BD specifies the total number of BDs for\nthe TX packet.  The bd_cnt field has 5 bits and the maximum number\nsupported is 32 with the value 0.\n\nCONFIG_MAX_SKB_FRAGS can be modified and the total number of SKB\nfragments can approach or exceed the maximum supported by the chip.\nAdd a macro to properly mask the bd_cnt field so that the value 32\nwill be properly masked and set to 0 in the bd_cnd field.\n\nWithout this patch, the out-of-range bd_cnt value will corrupt the\nTX BD and may cause TX timeout.\n\nThe next patch will check for values exceeding 32.\n\n## Affected\n\n- `linux_kernel >= 6.4, < 6.14.2`\n\n## Remediation\n\nUpgrade past the affected range:\n\n- `linux_kernel 6.14.2`","depth":"twilight","depthScore":47,"depthScoreParts":{"impact":47.3,"likelihood":0.1,"exploitation":0,"ransomware":0},"changes":[]}