CVE-2025-40264be2net: pass wrb_params in case of OS2BMC
Updated under an hour ago ()
Does this affect you?
It affects Linux and 1 other product. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: be2net: pass wrb_params in case of OS2BMC be_insert_vlan_in_pkt() is called with the wrb_params argument being NULL at be_send_pkt_to_bmc() call site. This may lead to dereferencing a NULL pointer when processing a workaround for specific packet, as commit bc0c3405abbb ("be2net: fix a Tx stall bug caused by a specific ipv6 packet") states. The correct way would be to pass the wrb_params from be_xmit().
- CVSS
- Not yet scored
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Deferred
- Record last updated
- Jun 2, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
Linux Linux linux:linux (from the name) | 760c295e0e8d982917d004c9095cff61c0cbd803 builds before 48d59b60dd5d7e4c48c077a2008c9dcd7b59bdfe; from 760c295e0e8d982917d004c9095cff61c0cbd803 before f499dfa5c98e92e72dd454eb95a1000a448f3405; from 760c295e0e8d982917d004c9095cff61c0cbd803 before 630360c6724e27f1aa494ba3fffe1e38c4205284; 760c295e0e8d982917d004c9095cff61c0cbd803 builds before 012ee5882b1830db469194466a210768ed207388; from 760c295e0e8d982917d004c9095cff61c0cbd803 before ce0a3699244aca3acb659f143c9cb1327b210f89; 760c295e0e8d982917d004c9095cff61c0cbd803 builds before 1ecd86ec6efddb59a10c927e8e679f183bb9113e; 760c295e0e8d982917d004c9095cff61c0cbd803 builds before 4c4741f6e7f2fa4e1486cb61e1c15b9236ec134d; 760c295e0e8d982917d004c9095cff61c0cbd803 builds before 7d277a7a58578dd62fd546ddaef459ec24ccae36 | CNA record |
Siemens RUGGEDCOM RST2428P siemens:ruggedcom_rst2428p (from the name) | before V4.0 | CISA ADP |
References
- https://git.kernel.org/stable/c/48d59b60dd5d7e4c48c077a2008c9dcd7b59bdfe
- https://git.kernel.org/stable/c/f499dfa5c98e92e72dd454eb95a1000a448f3405
- https://git.kernel.org/stable/c/630360c6724e27f1aa494ba3fffe1e38c4205284
- https://git.kernel.org/stable/c/012ee5882b1830db469194466a210768ed207388
- https://git.kernel.org/stable/c/ce0a3699244aca3acb659f143c9cb1327b210f89
- https://git.kernel.org/stable/c/1ecd86ec6efddb59a10c927e8e679f183bb9113e
- https://git.kernel.org/stable/c/4c4741f6e7f2fa4e1486cb61e1c15b9236ec134d
- https://git.kernel.org/stable/c/7d277a7a58578dd62fd546ddaef459ec24ccae36
- https://cert-portal.siemens.com/productcert/html/ssa-253495.html
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.