CVE-2025-40330 bnxt_en: Shutdown FW DMA in bnxt_shutdown()
A flaw in the bnxt_en driver allows memory corruption during kexec, potentially leading to denial of service or code execution in the new kernel.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2025-40330?
CVE-2025-40330 is a memory corruption vulnerability in Linux, published on 9 Dec 2025. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
In the Linux kernel, the following vulnerability has been resolved:
bnxt_en: Shutdown FW DMA in bnxt_shutdown()
The netif_close() call in bnxt_shutdown() only stops packet DMA. There may be FW DMA for trace logging (recently added) that will continue. If we kexec to a new kernel, the DMA will corrupt memory in the new kernel.
Add bnxt_hwrm_func_drv_unrgtr() to unregister the driver from the FW. This will stop the FW DMA. In case the call fails, call pcie_flr() to reset the function and stop the DMA.
Which versions are affected by CVE-2025-40330?
How do I fix CVE-2025-40330?
Apply the vendor's patch.
Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.
Is CVE-2025-40330 being exploited?
There is no known exploitation of CVE-2025-40330 in the wild and no public exploit code.
Sources
Also known as BELL-CVE-2025-40330, DEBIAN-CVE-2025-40330, GHSA-fj8r-2x4x-2q83, UBUNTU-CVE-2025-40330.