Linux Kernel Broadcom bnxt_en Driver Lock Dependency Vulnerability

A lock dependency issue has been identified in the Linux kernel's Broadcom bnxt_en Ethernet driver. This vulnerability arises from the improper handling of network device locks during the removal of the driver, which can lead to warnings and potential instability. The issue is present in several versions of the Linux kernel, including 6.16.0.

Impact

The vulnerability can cause lock dependency warnings, indicating potential issues with driver removal and network device management.

Reproduction

The vulnerability can be reproduced by removing the bnxt_en driver module using the 'rmmod' command. This action triggers a lock dependency warning because the 'bnxt_free_ntp_fltrs' function expects the network device lock to be held, but the device has already been unregistered during the driver removal process.

Remediation

Users can apply the latest patches available in the Linux kernel stable tree to address this vulnerability.