CVE-2025-21960

The bnxtrxpkt() updates ipsummed value at the end if checksum offload is enabled. When the XDP-MB program is attached and it returns XDPPASS, the bnxtxdpbuildskb() is called to update skbsharedinfo. The main purpose of bnxtxdpbuildskb() is to update skbsharedinfo, but it updates ip_summed value too if checksum offload is enabled. This is actually duplicate work.

When the bnxtrxpkt() updates ipsummed value, it checks if ipsummed is CHECKSUMNONE or not. It means that ipsummed should be CHECKSUMNONE at this moment. But ipsummed may already be updated to CHECKSUMUNNECESSARY in the XDP-MB-PASS path. So the by skbchecksumnoneassert() WARNS about it.

This is duplicate work and updating ipsummed in the bnxtxdpbuildskb() is not needed.

Splat looks like: WARNING: CPU: 3 PID: 5782 at ./include/linux/skbuff.h:5155 bnxtrxpkt+0x479b/0x7610 [bnxten] Modules linked in: bnxtre bnxten rdmaucm rdmacm iwcm ibcm ibuverbs veth xtnat xttcpudp xtconntrack nftchainnat xtMASQUERADE nf] CPU: 3 UID: 0 PID: 5782 Comm: socat Tainted: G W 6.14.0-rc4+ #27 Tainted: [W]=WARN Hardware name: ASUS System Product Name/PRIME Z690-P D4, BIOS 0603 11/01/2021 RIP: 0010:bnxtrxpkt+0x479b/0x7610 [bnxten] Code: 54 24 0c 4c 89 f1 4c 89 ff c1 ea 1f ff d3 0f 1f 00 49 89 c6 48 85 c0 0f 84 4c e5 ff ff 48 89 c7 e8 ca 3d a0 c8 e9 8f f4 ff ff <0f> 0b f RSP: 0018:ffff88881ba09928 EFLAGS: 00010202 RAX: 0000000000000000 RBX: 00000000c7590303 RCX: 0000000000000000 RDX: 1ffff1104e7d1610 RSI: 0000000000000001 RDI: ffff8881c91300b8 RBP: ffff88881ba09b28 R08: ffff888273e8b0d0 R09: ffff888273e8b070 R10: ffff888273e8b010 R11: ffff888278b0f000 R12: ffff888273e8b080 R13: ffff8881c9130e00 R14: ffff8881505d3800 R15: ffff888273e8b000 FS: 00007f5a2e7be080(0000) GS:ffff88881ba00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007fff2e708ff8 CR3: 000000013e3b0000 CR4: 00000000007506f0 PKRU: 55555554 Call Trace: <IRQ> ? warn+0xcd/0x2f0 ? bnxtrxpkt+0x479b/0x7610 ? reportbug+0x326/0x3c0 ? handlebug+0x53/0xa0 ? excinvalidop+0x14/0x50 ? asmexcinvalidop+0x16/0x20 ? bnxtrxpkt+0x479b/0x7610 ? bnxtrxpkt+0x3e41/0x7610 ? _pfxbnxtrxpkt+0x10/0x10 ? napicompletedone+0x2cf/0x7d0 _bnxtpollwork+0x4e8/0x1220 ? _pfxbnxtpollwork+0x10/0x10 ? _pfxmarklock.part.0+0x10/0x10 bnxtpollp5+0x36a/0xfa0 ? _pfxbnxtpollp5+0x10/0x10 _napipoll.constprop.0+0xa0/0x440 netrx_action+0x899/0xd00 ...

Following ping.py patch adds xdp-mb-pass case. so ping.py is going to be able to reproduce this issue.

References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type: GIT
Repo: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events: Introduced

1dc4c557bfedfcdf7fc0c46795857773b7ad66e7

Fixed

e8e3e03d69f2420eaa578199a65d281c58867105

Type: GIT
Repo: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events: Introduced

1dc4c557bfedfcdf7fc0c46795857773b7ad66e7

Fixed

ee086c8e775f9690282e3d26471dbcfd5dad5a6a

Type: GIT
Repo: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events: Introduced

1dc4c557bfedfcdf7fc0c46795857773b7ad66e7

Fixed

5b57ed14a1b85e7ab0074d9668a0baa6c94826c7

Type: GIT
Repo: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events: Introduced

1dc4c557bfedfcdf7fc0c46795857773b7ad66e7

Fixed

44578bc6460b8fca530fc7bd5897c115d9bd27e2

Type: GIT
Repo: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events: Introduced

1dc4c557bfedfcdf7fc0c46795857773b7ad66e7

Fixed

c03e7d05aa0e2f7e9a9ce5ad8a12471a53f941dc

Affected versions

v5.*

v5.18

v5.18-rc2

v5.18-rc3

v5.18-rc4

v5.18-rc5

v5.18-rc6

v5.18-rc7

v5.19

v5.19-rc1

v5.19-rc2

v5.19-rc3

v5.19-rc4

v5.19-rc5

v5.19-rc6

v5.19-rc7

v5.19-rc8

v6.*

v6.0

v6.0-rc1

v6.0-rc2

v6.0-rc3

v6.0-rc4

v6.0-rc5

v6.0-rc6

v6.0-rc7

v6.1

v6.1-rc1

v6.1-rc2

v6.1-rc3

v6.1-rc4

v6.1-rc5

v6.1-rc6

v6.1-rc7

v6.1-rc8

v6.1.1

v6.1.10

v6.1.100

v6.1.101

v6.1.102

v6.1.103

v6.1.104

v6.1.105

v6.1.106

v6.1.107

v6.1.108

v6.1.109

v6.1.11

v6.1.110

v6.1.111

v6.1.112

v6.1.113

v6.1.114

v6.1.115

v6.1.116

v6.1.117

v6.1.118

v6.1.119

v6.1.12

v6.1.120

v6.1.121

v6.1.122

v6.1.123

v6.1.124

v6.1.125

v6.1.126

v6.1.127

v6.1.128

v6.1.129

v6.1.13

v6.1.130

v6.1.131

v6.1.14

v6.1.15

v6.1.16

v6.1.17

v6.1.18

v6.1.19

v6.1.2

v6.1.20

v6.1.21

v6.1.22

v6.1.23

v6.1.24

v6.1.25

v6.1.26

v6.1.27

v6.1.28

v6.1.29

v6.1.3

v6.1.30

v6.1.31

v6.1.32

v6.1.33

v6.1.34

v6.1.35

v6.1.36

v6.1.37

v6.1.38

v6.1.39

v6.1.4

v6.1.40

v6.1.41

v6.1.42

v6.1.43

v6.1.44

v6.1.45

v6.1.46

v6.1.47

v6.1.48

v6.1.49

v6.1.5

v6.1.50

v6.1.51

v6.1.52

v6.1.53

v6.1.54

v6.1.55

v6.1.56

v6.1.57

v6.1.58

v6.1.59

v6.1.6

v6.1.60

v6.1.61

v6.1.62

v6.1.63

v6.1.64

v6.1.65

v6.1.66

v6.1.67

v6.1.68

v6.1.69

v6.1.7

v6.1.70

v6.1.71

v6.1.72

v6.1.73

v6.1.74

v6.1.75

v6.1.76

v6.1.77

v6.1.78

v6.1.79

v6.1.8

v6.1.80

v6.1.81

v6.1.82

v6.1.83

v6.1.84

v6.1.85

v6.1.86

v6.1.87

v6.1.88

v6.1.89

v6.1.9

v6.1.90

v6.1.91

v6.1.92

v6.1.93

v6.1.94

v6.1.95

v6.1.96

v6.1.97

v6.1.98

v6.1.99

v6.10

v6.10-rc1

v6.10-rc2

v6.10-rc3

v6.10-rc4

v6.10-rc5

v6.10-rc6

v6.10-rc7

v6.11

v6.11-rc1

v6.11-rc2

v6.11-rc3

v6.11-rc4

v6.11-rc5

v6.11-rc6

v6.11-rc7

v6.12

v6.12-rc1

v6.12-rc2

v6.12-rc3

v6.12-rc4

v6.12-rc5

v6.12-rc6

v6.12-rc7

v6.12.1

v6.12.10

v6.12.11

v6.12.12

v6.12.13

v6.12.14

v6.12.15

v6.12.16

v6.12.17

v6.12.18

v6.12.19

v6.12.2

v6.12.3

v6.12.4

v6.12.5

v6.12.6

v6.12.7

v6.12.8

v6.12.9

v6.13

v6.13-rc1

v6.13-rc2

v6.13-rc3

v6.13-rc4

v6.13-rc5

v6.13-rc6

v6.13-rc7

v6.13.1

v6.13.2

v6.13.3

v6.13.4

v6.13.5

v6.13.6

v6.13.7

v6.14-rc1

v6.14-rc2

v6.14-rc3

v6.14-rc4

v6.14-rc5

v6.2

v6.2-rc1

v6.2-rc2

v6.2-rc3

v6.2-rc4

v6.2-rc5

v6.2-rc6

v6.2-rc7

v6.2-rc8

v6.3

v6.3-rc1

v6.3-rc2

v6.3-rc3

v6.3-rc4

v6.3-rc5

v6.3-rc6

v6.3-rc7

v6.4

v6.4-rc1

v6.4-rc2

v6.4-rc3

v6.4-rc4

v6.4-rc5

v6.4-rc6

v6.4-rc7

v6.5

v6.5-rc1

v6.5-rc2

v6.5-rc3

v6.5-rc4

v6.5-rc5

v6.5-rc6

v6.5-rc7

v6.6

v6.6-rc1

v6.6-rc2

v6.6-rc3

v6.6-rc4

v6.6-rc5

v6.6-rc6

v6.6-rc7

v6.6.1

v6.6.10

v6.6.11

v6.6.12

v6.6.13

v6.6.14

v6.6.15

v6.6.16

v6.6.17

v6.6.18

v6.6.19

v6.6.2

v6.6.20

v6.6.21

v6.6.22

v6.6.23

v6.6.24

v6.6.25

v6.6.26

v6.6.27

v6.6.28

v6.6.29

v6.6.3

v6.6.30

v6.6.31

v6.6.32

v6.6.33

v6.6.34

v6.6.35

v6.6.36

v6.6.37

v6.6.38

v6.6.39

v6.6.4

v6.6.40

v6.6.41

v6.6.42

v6.6.43

v6.6.44

v6.6.45

v6.6.46

v6.6.47

v6.6.48

v6.6.49

v6.6.5

v6.6.50

v6.6.51

v6.6.52

v6.6.53

v6.6.54

v6.6.55

v6.6.56

v6.6.57

v6.6.58

v6.6.59

v6.6.6

v6.6.60

v6.6.61

v6.6.62

v6.6.63

v6.6.64

v6.6.65

v6.6.66

v6.6.67

v6.6.68

v6.6.69

v6.6.7

v6.6.70

v6.6.71

v6.6.72

v6.6.73

v6.6.74

v6.6.75

v6.6.76

v6.6.77

v6.6.78

v6.6.79

v6.6.8

v6.6.80

v6.6.81

v6.6.82

v6.6.83

v6.6.9

v6.7

v6.7-rc1

v6.7-rc2

v6.7-rc3

v6.7-rc4

v6.7-rc5

v6.7-rc6

v6.7-rc7

v6.7-rc8

v6.8

v6.8-rc1

v6.8-rc2

v6.8-rc3

v6.8-rc4

v6.8-rc5

v6.8-rc6

v6.8-rc7

v6.9

v6.9-rc1

v6.9-rc2

v6.9-rc3

v6.9-rc4

v6.9-rc5

v6.9-rc6

v6.9-rc7

Database specific

vanir_signatures

[
    {
        "signature_type": "Line",
        "id": "CVE-2025-21960-00a47039",
        "target": {
            "file": "drivers/net/ethernet/broadcom/bnxt/bnxt_xdp.h"
        },
        "signature_version": "v1",
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ee086c8e775f9690282e3d26471dbcfd5dad5a6a",
        "digest": {
            "line_hashes": [
                "240092639681474138833712748749785134900",
                "166492991724617772738635008212404829072",
                "100158943410553800215877579292713850808"
            ],
            "threshold": 0.9
        }
    },
    {
        "signature_type": "Line",
        "id": "CVE-2025-21960-01537789",
        "target": {
            "file": "drivers/net/ethernet/broadcom/bnxt/bnxt_xdp.c"
        },
        "signature_version": "v1",
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@c03e7d05aa0e2f7e9a9ce5ad8a12471a53f941dc",
        "digest": {
            "line_hashes": [
                "8035868042635782815254288593924293000",
                "290461559772661392976901713875003604575",
                "259637668130475418906250283182806208086",
                "17093755111113768874651541974363851994",
                "338206458532785334915703079211320034589",
                "45124727950414611274427593369773779812",
                "14383615885968335927717000227630252157",
                "136738952382157342849343050397406391397",
                "252825592797907730053835331449777699388",
                "265127530853057696506257088051269311488",
                "145719600559089183538796416693170092758",
                "123227157078795583065786299091051420272",
                "199023125628197146213908966495541014659",
                "63584640753346667909304434200182840097",
                "70154027001220586240855751683829727858",
                "125819124667637979508334745787846887135"
            ],
            "threshold": 0.9
        }
    },
    {
        "signature_type": "Line",
        "id": "CVE-2025-21960-023692b5",
        "target": {
            "file": "drivers/net/ethernet/broadcom/bnxt/bnxt_xdp.c"
        },
        "signature_version": "v1",
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@5b57ed14a1b85e7ab0074d9668a0baa6c94826c7",
        "digest": {
            "line_hashes": [
                "8035868042635782815254288593924293000",
                "290461559772661392976901713875003604575",
                "259637668130475418906250283182806208086",
                "17093755111113768874651541974363851994",
                "338206458532785334915703079211320034589",
                "45124727950414611274427593369773779812",
                "14383615885968335927717000227630252157",
                "136738952382157342849343050397406391397",
                "252825592797907730053835331449777699388",
                "265127530853057696506257088051269311488",
                "145719600559089183538796416693170092758",
                "123227157078795583065786299091051420272",
                "199023125628197146213908966495541014659",
                "63584640753346667909304434200182840097",
                "70154027001220586240855751683829727858",
                "125819124667637979508334745787846887135"
            ],
            "threshold": 0.9
        }
    },
    {
        "signature_type": "Line",
        "id": "CVE-2025-21960-050096ae",
        "target": {
            "file": "drivers/net/ethernet/broadcom/bnxt/bnxt_xdp.h"
        },
        "signature_version": "v1",
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@44578bc6460b8fca530fc7bd5897c115d9bd27e2",
        "digest": {
            "line_hashes": [
                "240092639681474138833712748749785134900",
                "166492991724617772738635008212404829072",
                "100158943410553800215877579292713850808"
            ],
            "threshold": 0.9
        }
    },
    {
        "signature_type": "Line",
        "id": "CVE-2025-21960-188295df",
        "target": {
            "file": "drivers/net/ethernet/broadcom/bnxt/bnxt.c"
        },
        "signature_version": "v1",
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e8e3e03d69f2420eaa578199a65d281c58867105",
        "digest": {
            "line_hashes": [
                "233133588185857472932712999456917962518",
                "284862497753899179857086475966625791669",
                "302019735234721787464141407427524580690",
                "292980414079793977477713868333667247232"
            ],
            "threshold": 0.9
        }
    },
    {
        "signature_type": "Function",
        "id": "CVE-2025-21960-1fe8741e",
        "target": {
            "function": "bnxt_xdp_build_skb",
            "file": "drivers/net/ethernet/broadcom/bnxt/bnxt_xdp.c"
        },
        "signature_version": "v1",
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@c03e7d05aa0e2f7e9a9ce5ad8a12471a53f941dc",
        "digest": {
            "function_hash": "276606665741734407776341225239413940383",
            "length": 488.0
        }
    },
    {
        "signature_type": "Function",
        "id": "CVE-2025-21960-22e01913",
        "target": {
            "function": "bnxt_xdp_build_skb",
            "file": "drivers/net/ethernet/broadcom/bnxt/bnxt_xdp.c"
        },
        "signature_version": "v1",
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e8e3e03d69f2420eaa578199a65d281c58867105",
        "digest": {
            "function_hash": "88721928957047139810232909035093800702",
            "length": 498.0
        }
    },
    {
        "signature_type": "Line",
        "id": "CVE-2025-21960-249e322a",
        "target": {
            "file": "drivers/net/ethernet/broadcom/bnxt/bnxt_xdp.h"
        },
        "signature_version": "v1",
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e8e3e03d69f2420eaa578199a65d281c58867105",
        "digest": {
            "line_hashes": [
                "240092639681474138833712748749785134900",
                "166492991724617772738635008212404829072",
                "100158943410553800215877579292713850808"
            ],
            "threshold": 0.9
        }
    },
    {
        "signature_type": "Line",
        "id": "CVE-2025-21960-2aff39b3",
        "target": {
            "file": "drivers/net/ethernet/broadcom/bnxt/bnxt.c"
        },
        "signature_version": "v1",
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@44578bc6460b8fca530fc7bd5897c115d9bd27e2",
        "digest": {
            "line_hashes": [
                "233133588185857472932712999456917962518",
                "284862497753899179857086475966625791669",
                "302019735234721787464141407427524580690",
                "292980414079793977477713868333667247232"
            ],
            "threshold": 0.9
        }
    },
    {
        "signature_type": "Function",
        "id": "CVE-2025-21960-389abdb8",
        "target": {
            "function": "bnxt_rx_pkt",
            "file": "drivers/net/ethernet/broadcom/bnxt/bnxt.c"
        },
        "signature_version": "v1",
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@44578bc6460b8fca530fc7bd5897c115d9bd27e2",
        "digest": {
            "function_hash": "151375669939595255869047258477688997",
            "length": 5723.0
        }
    },
    {
        "signature_type": "Function",
        "id": "CVE-2025-21960-3fd994d3",
        "target": {
            "function": "bnxt_xdp_build_skb",
            "file": "drivers/net/ethernet/broadcom/bnxt/bnxt_xdp.c"
        },
        "signature_version": "v1",
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ee086c8e775f9690282e3d26471dbcfd5dad5a6a",
        "digest": {
            "function_hash": "88721928957047139810232909035093800702",
            "length": 498.0
        }
    },
    {
        "signature_type": "Line",
        "id": "CVE-2025-21960-54c23256",
        "target": {
            "file": "drivers/net/ethernet/broadcom/bnxt/bnxt_xdp.h"
        },
        "signature_version": "v1",
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@5b57ed14a1b85e7ab0074d9668a0baa6c94826c7",
        "digest": {
            "line_hashes": [
                "240092639681474138833712748749785134900",
                "166492991724617772738635008212404829072",
                "100158943410553800215877579292713850808"
            ],
            "threshold": 0.9
        }
    },
    {
        "signature_type": "Line",
        "id": "CVE-2025-21960-83deb57b",
        "target": {
            "file": "drivers/net/ethernet/broadcom/bnxt/bnxt_xdp.c"
        },
        "signature_version": "v1",
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@44578bc6460b8fca530fc7bd5897c115d9bd27e2",
        "digest": {
            "line_hashes": [
                "8035868042635782815254288593924293000",
                "290461559772661392976901713875003604575",
                "259637668130475418906250283182806208086",
                "17093755111113768874651541974363851994",
                "338206458532785334915703079211320034589",
                "45124727950414611274427593369773779812",
                "14383615885968335927717000227630252157",
                "136738952382157342849343050397406391397",
                "252825592797907730053835331449777699388",
                "265127530853057696506257088051269311488",
                "145719600559089183538796416693170092758",
                "123227157078795583065786299091051420272",
                "199023125628197146213908966495541014659",
                "63584640753346667909304434200182840097",
                "70154027001220586240855751683829727858",
                "125819124667637979508334745787846887135"
            ],
            "threshold": 0.9
        }
    },
    {
        "signature_type": "Function",
        "id": "CVE-2025-21960-86ccef3a",
        "target": {
            "function": "bnxt_xdp_build_skb",
            "file": "drivers/net/ethernet/broadcom/bnxt/bnxt_xdp.c"
        },
        "signature_version": "v1",
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@5b57ed14a1b85e7ab0074d9668a0baa6c94826c7",
        "digest": {
            "function_hash": "276606665741734407776341225239413940383",
            "length": 488.0
        }
    },
    {
        "signature_type": "Function",
        "id": "CVE-2025-21960-8c969d53",
        "target": {
            "function": "bnxt_xdp_build_skb",
            "file": "drivers/net/ethernet/broadcom/bnxt/bnxt_xdp.c"
        },
        "signature_version": "v1",
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@44578bc6460b8fca530fc7bd5897c115d9bd27e2",
        "digest": {
            "function_hash": "276606665741734407776341225239413940383",
            "length": 488.0
        }
    },
    {
        "signature_type": "Line",
        "id": "CVE-2025-21960-ab9c1f33",
        "target": {
            "file": "drivers/net/ethernet/broadcom/bnxt/bnxt_xdp.c"
        },
        "signature_version": "v1",
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e8e3e03d69f2420eaa578199a65d281c58867105",
        "digest": {
            "line_hashes": [
                "8035868042635782815254288593924293000",
                "290461559772661392976901713875003604575",
                "259637668130475418906250283182806208086",
                "17093755111113768874651541974363851994",
                "338206458532785334915703079211320034589",
                "45124727950414611274427593369773779812",
                "14383615885968335927717000227630252157",
                "136738952382157342849343050397406391397",
                "252825592797907730053835331449777699388",
                "265127530853057696506257088051269311488",
                "145719600559089183538796416693170092758",
                "123227157078795583065786299091051420272",
                "199023125628197146213908966495541014659",
                "63584640753346667909304434200182840097",
                "70154027001220586240855751683829727858",
                "235722844009979215280185402795375185073"
            ],
            "threshold": 0.9
        }
    },
    {
        "signature_type": "Function",
        "id": "CVE-2025-21960-c19d225b",
        "target": {
            "function": "bnxt_rx_pkt",
            "file": "drivers/net/ethernet/broadcom/bnxt/bnxt.c"
        },
        "signature_version": "v1",
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@5b57ed14a1b85e7ab0074d9668a0baa6c94826c7",
        "digest": {
            "function_hash": "199209268575685675989334678012571706100",
            "length": 5830.0
        }
    },
    {
        "signature_type": "Line",
        "id": "CVE-2025-21960-c1f200b3",
        "target": {
            "file": "drivers/net/ethernet/broadcom/bnxt/bnxt_xdp.h"
        },
        "signature_version": "v1",
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@c03e7d05aa0e2f7e9a9ce5ad8a12471a53f941dc",
        "digest": {
            "line_hashes": [
                "240092639681474138833712748749785134900",
                "166492991724617772738635008212404829072",
                "100158943410553800215877579292713850808"
            ],
            "threshold": 0.9
        }
    },
    {
        "signature_type": "Function",
        "id": "CVE-2025-21960-c1f7f72a",
        "target": {
            "function": "bnxt_rx_pkt",
            "file": "drivers/net/ethernet/broadcom/bnxt/bnxt.c"
        },
        "signature_version": "v1",
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e8e3e03d69f2420eaa578199a65d281c58867105",
        "digest": {
            "function_hash": "325174781466222899599205097245488754226",
            "length": 5669.0
        }
    },
    {
        "signature_type": "Line",
        "id": "CVE-2025-21960-c46c1093",
        "target": {
            "file": "drivers/net/ethernet/broadcom/bnxt/bnxt.c"
        },
        "signature_version": "v1",
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@c03e7d05aa0e2f7e9a9ce5ad8a12471a53f941dc",
        "digest": {
            "line_hashes": [
                "233133588185857472932712999456917962518",
                "284862497753899179857086475966625791669",
                "302019735234721787464141407427524580690",
                "292980414079793977477713868333667247232"
            ],
            "threshold": 0.9
        }
    },
    {
        "signature_type": "Function",
        "id": "CVE-2025-21960-c6c211ca",
        "target": {
            "function": "bnxt_rx_pkt",
            "file": "drivers/net/ethernet/broadcom/bnxt/bnxt.c"
        },
        "signature_version": "v1",
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ee086c8e775f9690282e3d26471dbcfd5dad5a6a",
        "digest": {
            "function_hash": "325174781466222899599205097245488754226",
            "length": 5669.0
        }
    },
    {
        "signature_type": "Line",
        "id": "CVE-2025-21960-d159a6ba",
        "target": {
            "file": "drivers/net/ethernet/broadcom/bnxt/bnxt_xdp.c"
        },
        "signature_version": "v1",
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ee086c8e775f9690282e3d26471dbcfd5dad5a6a",
        "digest": {
            "line_hashes": [
                "8035868042635782815254288593924293000",
                "290461559772661392976901713875003604575",
                "259637668130475418906250283182806208086",
                "17093755111113768874651541974363851994",
                "338206458532785334915703079211320034589",
                "45124727950414611274427593369773779812",
                "14383615885968335927717000227630252157",
                "136738952382157342849343050397406391397",
                "252825592797907730053835331449777699388",
                "265127530853057696506257088051269311488",
                "145719600559089183538796416693170092758",
                "123227157078795583065786299091051420272",
                "199023125628197146213908966495541014659",
                "63584640753346667909304434200182840097",
                "70154027001220586240855751683829727858",
                "235722844009979215280185402795375185073"
            ],
            "threshold": 0.9
        }
    },
    {
        "signature_type": "Line",
        "id": "CVE-2025-21960-d67fd80a",
        "target": {
            "file": "drivers/net/ethernet/broadcom/bnxt/bnxt.c"
        },
        "signature_version": "v1",
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ee086c8e775f9690282e3d26471dbcfd5dad5a6a",
        "digest": {
            "line_hashes": [
                "233133588185857472932712999456917962518",
                "284862497753899179857086475966625791669",
                "302019735234721787464141407427524580690",
                "292980414079793977477713868333667247232"
            ],
            "threshold": 0.9
        }
    },
    {
        "signature_type": "Function",
        "id": "CVE-2025-21960-d7392b53",
        "target": {
            "function": "bnxt_rx_pkt",
            "file": "drivers/net/ethernet/broadcom/bnxt/bnxt.c"
        },
        "signature_version": "v1",
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@c03e7d05aa0e2f7e9a9ce5ad8a12471a53f941dc",
        "digest": {
            "function_hash": "208810485533396747100625894067292341768",
            "length": 5721.0
        }
    },
    {
        "signature_type": "Line",
        "id": "CVE-2025-21960-e68b48a0",
        "target": {
            "file": "drivers/net/ethernet/broadcom/bnxt/bnxt.c"
        },
        "signature_version": "v1",
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@5b57ed14a1b85e7ab0074d9668a0baa6c94826c7",
        "digest": {
            "line_hashes": [
                "233133588185857472932712999456917962518",
                "284862497753899179857086475966625791669",
                "302019735234721787464141407427524580690",
                "292980414079793977477713868333667247232"
            ],
            "threshold": 0.9
        }
    }
]

Linux / Kernel

Package

Name: Kernel

Affected ranges

Type: ECOSYSTEM
Events: Introduced

5.19.0

Fixed

6.1.132

Type: ECOSYSTEM
Events: Introduced

6.2.0

Fixed

6.6.84

Type: ECOSYSTEM
Events: Introduced

6.7.0

Fixed

6.12.20

Type: ECOSYSTEM
Events: Introduced

6.13.0

Fixed

6.13.8