The vulnerability of the dma_unmap_len_set() function in the bnxt_en component of the Linux operating system allows a hacker to increase their privileges.

🗓️ 30 Jul 2025 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 5 Views

Vulnerability in dma_unmap_len_set() in bnxt_en of the Linux kernel allows privilege escalation via out of bounds memory access.

Reporter	Title	Published	Views	Family All 249
Tenable Nessus	Amazon Linux 2 : kernel, --advisory ALAS2KERNEL-5.10-2025-101 (ALASKERNEL-5.10-2025-101)	9 Aug 202500:00	–	nessus
Tenable Nessus	Amazon Linux 2 : kernel, --advisory ALAS2KERNEL-5.4-2025-106 (ALASKERNEL-5.4-2025-106)	9 Aug 202500:00	–	nessus
Tenable Nessus	Debian dla-4327 : ata-modules-5.10.0-35-armmp-di - security update	13 Oct 202500:00	–	nessus
Tenable Nessus	Debian dla-4328 : linux-config-6.1 - security update	13 Oct 202500:00	–	nessus
Tenable Nessus	Debian dsa-5973 : affs-modules-6.1.0-37-4kc-malta-di - security update	13 Aug 202500:00	–	nessus
Tenable Nessus	Debian dsa-5975 : ata-modules-6.12.31-armmp-di - security update	8 Dec 202500:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP12 : kernel (EulerOS-SA-2026-1071)	15 Jan 202600:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP12 : kernel (EulerOS-SA-2026-1091)	15 Jan 202600:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP13 : kernel (EulerOS-SA-2026-1212)	2 Feb 202600:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP13 : kernel (EulerOS-SA-2026-1224)	2 Feb 202600:00	–	nessus

Vulners

Node

novell opensuse_leapMatch15.5

OR

red_hat red_hat_enterprise_linuxMatch8

OR

novell opensuse_leapMatch15.4

OR

red_hat red_hat_enterprise_linuxMatch9

OR

novell opensuse_leapMatch15.6

OR

red_hat red_hat_enterprise_linuxMatch10

Source	Link
access	www.access.redhat.com/security/cve/cve-2025-38439
git	www.git.kernel.org/stable/c/16ae306602163fcb7ae83f2701b542e43c100cee
git	www.git.kernel.org/stable/c/3cdf199d4755d477972ee87110b2aebc88b3cfad
git	www.git.kernel.org/stable/c/50dad9909715094e7d9ca25e9e0412b875987519
git	www.git.kernel.org/stable/c/5909679a82cd74cf0343d9e3ddf4b6931aa7e613
git	www.git.kernel.org/stable/c/8d672a1a6bfc81fef9151925c9c0481f4acf4bec
git	www.git.kernel.org/stable/c/e260f4d49370c85a4701d43c6d16b8c39f8b605f
git	www.git.kernel.org/stable/c/f154e41e1d9d15ab21300ba7bbf0ebb5cb3b9c2a
git	www.git.kernel.org/stable/c/f9eaf6d036075dc820520e1194692c0619b7297b
lore	www.lore.kernel.org/linux-cve-announce/2025072501-CVE-2025-38439-3f3b@gregkh/

19 Mar 2026 00:00Current

6.7Medium risk

Vulners AI Score6.7

CVSS 26

CVSS 37

EPSS0.0017

bnxt_en component linux kernel dma_unmap_len_set out of bounds access memory boundary overflow privilege escalation buffer overrun