In the Linux kernel, the following vulnerability has been resolved:
eth: bnxt: fix out-of-range access of vnic_info array
The bnxtqueue{start | stop}() access vnicinfo as much as allocated, which indicates bp->nrvnics. So, it should not reach bp->vnicinfo[bp->nrvnics].
{
"cna_assigner": "Linux",
"osv_generated_from": "https://github.com/CVEProject/cvelistV5/blob/cc431b3424123d84bcd7afd4de150b33f117a8ef/cves/2025/22xxx/CVE-2025-22112.json"
}