Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
In the Linux kernel, the following vulnerability has been resolved: bnxt_en: fix OOB access in DBG_BUF_PRODUCER async event handler The ASYNC_EVENT_CMPL_EVENT_ID_DBG_BUF_PRODUCER handler in bnxt_async_event_process() uses a firmware-supplied 'type' field directly as an index into bp->bs_trace[] without bounds validation. The 'type' field is a 16-bit value extracted from DMA-mapped completion ring memory that the NIC writes directly to host RAM. A malicious or compromised NIC can supply any value from 0 to 65535, causing an out-of-bounds access into kernel heap memory. The bnxt_bs_trace_check_wrap() call then dereferences bs_trace->magic_byte and writes to bs_trace->last_offset and bs_trace->wrapped, leading to kernel memory corruption or a crash. Fix by adding a bounds check and defining BNXT_TRACE_MAX as DBG_LOG_BUFFER_FLUSH_REQ_TYPE_ERR_QPC_TRACE + 1 to cover all currently defined firmware trace types (0x0 through 0xc).
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 1 product
| Date | Total | Labels |
|---|
| 2026-04-03 | 3 | Disclosure1General1Patch1 |
| 2026-05-30 | 1 | Patch1 |
There is a new vulnerability with elevated criticality in Linux Kernel (CVE-2026-31395) https://vuldb.com/vuln/355166
Post summary
A new, critically-rated Linux kernel vulnerability (CVE-2026-31395) is reported, but the text provides no additional technical details, exploits, or mitigation guidance.
🚨 HIGH severity Linux kernel CVE-2026-31395 (CVSS 7.1) OOB access in bnxt_en driver allows malicious NIC to corrupt kernel memory via unbounded firmware trace type field. Patch immediately. #CVE #Vulnerability #PatchNow https://t.co/xRnrkIt01l
Post summary
The tweet announces a high‑severity Linux kernel vulnerability (CVE‑2026‑31395) that allows OOB access and kernel memory corruption, and urges an immediate patch.
CVE-2026-31395 In the Linux kernel, the following vulnerability has been resolve... https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-31395 Customizable Vulnerability Alerts: https://alerts.vulmon.com/?utm_source=twitter&utm_medium=social&utm_campaign=2102281&utm_content=4
Post summary
The post merely acknowledges the existence of CVE-2026-31395 with a link to a vulnerability detail page, without providing technical specifics, exploit code, or remediation information.
CVE-2026-31395 In the Linux kernel, the following vulnerability has been resolved: bnxt_en: fix OOB access in DBG_BUF_PRODUCER async event handler The ASYNC_EVENT_CMPL_EVENT_ID_DB… https://www.cve.org/CVERecord?id=CVE-2026-31395
Post summary
CVE‑2026‑31395 is a Linux kernel flaw involving an out‑of‑bounds access in the bnxt_en driver’s async event handler, which has now been resolved with a kernel patch.
5 of 5 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| OS | linux | linux_kernel | - | - | - |
| OS | linux | linux_kernel | 7.0 | - | - |
| OS | linux | linux_kernel | 7.0 | - | - |
| OS | linux | linux_kernel | 7.0 | - | - |
| OS | linux | linux_kernel | 7.0 | - | - |