From: qianjiaru A state management vulnerability exists in the `bnxt_hwrm_reserve_vf_rings()` function of the Linux kernel's bnxt_en network driver. The vulnerability causes incomplete resource state updates in SR-IOV Virtual Function (VF) environments, potentially leading to system instability and resource allocation failures in virtualized deployments. Signed-off-by: qianjiaru --- drivers/net/ethernet/broadcom/bnxt/bnxt.c | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/drivers/net/ethernet/broadcom/bnxt/bnxt.c b/drivers/net/ethernet/broadcom/bnxt/bnxt.c index 207a8bb36..2d06b0ddc 100644 --- a/drivers/net/ethernet/broadcom/bnxt/bnxt.c +++ b/drivers/net/ethernet/broadcom/bnxt/bnxt.c @@ -7801,7 +7801,13 @@ bnxt_hwrm_reserve_vf_rings(struct bnxt *bp, struct bnxt_hw_rings *hwr) int rc; if (!BNXT_NEW_RM(bp)) { + // Update all relevant resource state, not just TX rings bp->hw_resc.resv_tx_rings = hwr->tx; + bp->hw_resc.resv_rx_rings = hwr->rx; + bp->hw_resc.resv_vnics = hwr->vnic; + bp->hw_resc.resv_rsscos_ctxs = hwr->rss_ctx; + bp->hw_resc.resv_cp_rings = hwr->cp; + bp->hw_resc.resv_hw_ring_grps = hwr->grp; return 0; } -- 2.34.1