Linux Kernel bnxt_en Driver Denial-of-Service Vulnerability Due to Excessive Memory Allocation

A denial-of-service vulnerability has been identified in the Linux kernel's bnxt_en driver, specifically in versions prior to 5.10.156. The issue arises from the driver allocating a large chunk of memory (order-5) on systems with 4K pages to manage concurrent TPA (TCP Segmentation Offload) completions. This excessive allocation can lead to memory allocation failures, as reported by NetworkManager. The vulnerability is particularly relevant for users with P5 chips, where the driver must handle up to 256 concurrent TPA instances.

Impact

Excessive memory allocation can cause allocation failures, leading to denial-of-service conditions where the NetworkManager is unable to function properly.