A critical memory underflow vulnerability in the Linux kernel bnxt driver allows unauthenticated remote attackers to trigger system instability or potential code execution.

This is a memory underflow flaw occurring in the bnxt_rx_multi_page_skb function within the bnxt network driver. An unauthenticated attacker can trigger this vulnerability by sending specifically crafted network traffic that forces an invalid memory offset calculation during XDP head adjustment, leading to memory corruption or kernel panic.

The vulnerability carries a CVSS score of 9.8, reflecting its potential for full system compromise. Successful exploitation allows for remote code execution or persistent denial of service, which can lead to significant operational downtime and the compromise of sensitive data stored on affected network infrastructure.

Immediate Action: Update the Linux kernel to version 7.1.5 or later, which contains the upstream fix for the bnxt driver memory calculation error.

Proactive Monitoring: Monitor kernel logs for recurring "napi_build_skb" errors or unexpected system reboots that may indicate exploitation attempts.

Compensating Controls: Deploy network-level traffic filtering or Intrusion Prevention Systems (IPS) to block malformed XDP-related network packets that target the bnxt driver.

Public Exploit Available: No

Given the critical severity of this kernel-level memory corruption flaw, organizations must prioritize patching the Linux kernel across all affected production environments. Applying the vendor-provided security updates is the only effective way to neutralize the risk of remote system compromise and ensure the integrity of the network stack.