Linux Kernel RDMA/bnxt_re Division Error Vulnerability Leading to Kernel Panic

Vulnerability

A division error vulnerability has been identified in the Linux kernel's RDMA/bnxt_re component, specifically when using NVMe target with 'use_srq' enabled. This vulnerability causes a kernel panic due to improper handling of page details for shared receive queues (SRQs) created by kernel consumers. The issue arises because the page size and shift information is only configured for user space SRQs, leaving kernel space SRQs vulnerable to this error.

Impact

Exploitation of this vulnerability leads to a kernel panic, causing a denial of service by abruptly terminating system processes and potentially causing data loss.

Reproduction

To reproduce this vulnerability, enable the 'use_srq' option while using an NVMe target. This will trigger a kernel panic due to a division error, as the kernel space shared receive queues do not have the correct page size and shift information, unlike the user space SRQs.

Added: Jun 9, 2025, 7:46 PM
Updated: Jun 9, 2025, 7:46 PM

Vulnerability Rating

Custom Algorithm
spread
9.0
impact
2.5
exploitability
5.7
remediation
0.0
relevance
0.0
threat
4.8
urgency
2.9
incentive
1.7

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.