CVE-2024-38540

CVE-2024-38540 concerns the Linux kernel bnxt_re driver. The vulnerability is due to undefined behavior triggered when bnxt_qplib_alloc_init_hwq is called with hwq_attr->aux_depth != 0 and hwq_attr->aux_stride == 0, which causes roundup_pow_of_two(hwq_attr->aux_stride) to run with a 0 va...