CVE-2025-71092

CVE-2025-71092 describes an out-of-bounds write vulnerability in the Linux kernel's RDMA bnxt_re driver. Specifically, a misplacement of new hardware counters in the bnxt_re_copy_err_stats() function led to an attempt to write beyond allocated memory. This issue affects systems utilizing the bnxt_re driver, particularly those with chip_gen_p5_p7 devices, though the fix addresses generic hardware counter inclusion. The vulnerability's severity is currently unrated by CVSS, but its nature as an out-of-bounds write suggests potential for system instability or denial of service, and possibly arbitrary code execution depending on context. The attack vector would likely involve specific RDMA operations. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage regarding this CVE. The vulnerability is considered inactive on the Hot List.