CVE-2025-40264
Unknown
Description
In the Linux kernel, the following vulnerability has been resolved: be2net: pass wrb_params in case of OS2BMC be_insert_vlan_in_pkt() is called with the wrb_params argument being NULL at be_send_pkt_to_bmc() call site. This may lead to dereferencing a NULL pointer when processing a workaround for specific packet, as commit bc0c3405abbb ("be2net: fix a Tx stall bug caused by a specific ipv6 packet") states. The correct way would be to pass the wrb_params from be_xmit().
SeverityUnknown
CVSS—
Exploit probability—
Product
Linux
PublishedDec 4, 2025
First seenDec 4, 2025
How to fix
Update
- Linux Linux48d59b60dd5d7e4c48c077a2008c9dcd7b59bdfe, f499dfa5c98e92e72dd454eb95a1000a448f3405, 630360c6724e27f1aa494ba3fffe1e38c4205284, 012ee5882b1830db469194466a210768ed207388, ce0a3699244aca3acb659f143c9cb1327b210f89, 1ecd86ec6efddb59a10c927e8e679f183bb9113e, 4c4741f6e7f2fa4e1486cb61e1c15b9236ec134d, 7d277a7a58578dd62fd546ddaef459ec24ccae36 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | 760c295e0e8d982917d004c9095cff61c0cbd803 ≤ v < 48d59b60dd5d7e4c48c077a2008c9dcd7b59bdfe, 760c295e0e8d982917d004c9095cff61c0cbd803 ≤ v < f499dfa5c98e92e72dd454eb95a1000a448f3405, 760c295e0e8d982917d004c9095cff61c0cbd803 ≤ v < 630360c6724e27f1aa494ba3fffe1e38c4205284, 760c295e0e8d982917d004c9095cff61c0cbd803 ≤ v < 012ee5882b1830db469194466a210768ed207388, 760c295e0e8d982917d004c9095cff61c0cbd803 ≤ v < ce0a3699244aca3acb659f143c9cb1327b210f89, 760c295e0e8d982917d004c9095cff61c0cbd803 ≤ v < 1ecd86ec6efddb59a10c927e8e679f183bb9113e, 760c295e0e8d982917d004c9095cff61c0cbd803 ≤ v < 4c4741f6e7f2fa4e1486cb61e1c15b9236ec134d, 760c295e0e8d982917d004c9095cff61c0cbd803 ≤ v < 7d277a7a58578dd62fd546ddaef459ec24ccae36, 4.2 | 48d59b60dd5d7e4c48c077a2008c9dcd7b59bdfe, f499dfa5c98e92e72dd454eb95a1000a448f3405, 630360c6724e27f1aa494ba3fffe1e38c4205284, 012ee5882b1830db469194466a210768ed207388, ce0a3699244aca3acb659f143c9cb1327b210f89, 1ecd86ec6efddb59a10c927e8e679f183bb9113e, 4c4741f6e7f2fa4e1486cb61e1c15b9236ec134d, 7d277a7a58578dd62fd546ddaef459ec24ccae36 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.