vulntracker.iovulntracker.io
© 2026 vulntracker.io

CVE-2025-40264

be2net: pass wrb_params in case of OS2BMC

N/A
Published: December 4, 2025 at 04:08 PM UTC
Updated: October 18, 2026 at 06:10 PM UTC
2 products affected across 2 vendorsLinux KernelRUGGEDCOM RST2428P Firmware

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Start FreeSign In
Severity
N/A
Exploit prediction
EPSS 0.2%

Description

In the Linux kernel, the following vulnerability has been resolved: be2net: pass wrb_params in case of OS2BMC be_insert_vlan_in_pkt() is called with the wrb_params argument being NULL at be_send_pkt_to_bmc() call site.  This may lead to dereferencing a NULL pointer when processing a workaround for specific packet, as commit bc0c3405abbb ("be2net: fix a Tx stall bug caused by a specific ipv6 packet") states. The correct way would be to pass the wrb_params from be_xmit().

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Linux Kernel· Linux
90%
4.2760c295e0e8d982917d004c9095cff61c0cbd803
Vendor states this is fixed in 012ee5882b1830db469194466a210768ed207388 (fixed)
Vendor states this is fixed in 1ecd86ec6efddb59a10c927e8e679f183bb9113e (fixed)
Vendor states this is fixed in 48d59b60dd5d7e4c48c077a2008c9dcd7b59bdfe (fixed)
Vendor states this is fixed in 4c4741f6e7f2fa4e1486cb61e1c15b9236ec134d (fixed)
Vendor states this is fixed in 630360c6724e27f1aa494ba3fffe1e38c4205284 (fixed)
Vendor states this is fixed in 7d277a7a58578dd62fd546ddaef459ec24ccae36 (fixed)
Vendor states this is fixed in ce0a3699244aca3acb659f143c9cb1327b210f89 (fixed)
Vendor states this is fixed in f499dfa5c98e92e72dd454eb95a1000a448f3405 (fixed)
Vendor states this is fixed in 4.2 (unaffected)
Vendor states this is fixed in 5.10.247 (unaffected)
Vendor states this is fixed in 5.15.197 (unaffected)
Vendor states this is fixed in 5.4.302 (unaffected)
Vendor states this is fixed in 6.1.159 (unaffected)
Vendor states this is fixed in 6.12.60 (unaffected)
Vendor states this is fixed in 6.17.10 (unaffected)
Vendor states this is fixed in 6.18 (unaffected)
Vendor states this is fixed in 6.6.118 (unaffected)
RUGGEDCOM RST2428P Firmware· Siemens
60%
v < V4.0
Affected range stops below V4.0, so it looks safe — our inference, not a vendor statement

Remediation

No guide yet

No remediation guidance has been written for this CVE yet, and no fixed version or vendor advisory is recorded against it.

References (9)

Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/1ecd86ec6efddb59a10c927e8e679f183bb9113e
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/48d59b60dd5d7e4c48c077a2008c9dcd7b59bdfe
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/4c4741f6e7f2fa4e1486cb61e1c15b9236ec134d
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/7d277a7a58578dd62fd546ddaef459ec24ccae36
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
https://git.kernel.org/stable/c/ce0a3699244aca3acb659f143c9cb1327b210f89
Source: cverecord
https://git.kernel.org/stable/c/f499dfa5c98e92e72dd454eb95a1000a448f3405
Source: cverecord
https://git.kernel.org/stable/c/630360c6724e27f1aa494ba3fffe1e38c4205284
Source: cverecord
https://git.kernel.org/stable/c/012ee5882b1830db469194466a210768ed207388

Quick Info

StatusDEFERRED

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Create accountSign in
Free plan, no card