Security readout for executives and security teams
Plain-English summary
This Linux kernel issue can crash affected systems when a specific RDMA storage path creates shared receive queues from kernel space. The reported failure is a divide error leading to a kernel panic during NVMe target RDMA use with use_srq enabled. The available sources do not show active exploitation or a CVSS score.
Executive priority
Treat this as a targeted availability risk for RDMA-backed storage infrastructure, not a broad internet-facing emergency. Patch affected storage nodes through normal urgent maintenance, with higher priority where kernel panic could disrupt production workloads.
Technical view
CVE-2025-21885 affects Linux RDMA/bnxt_re SRQ handling. Page size and page shift were initialized for user-space SRQs but not kernel-created SRQs. Kernel consumers such as nvmet_rdma with use_srq can trigger bnxt_qplib_alloc_init_hwq failure and panic. Stable kernel commits set the missing page details.
Likely exposure
Exposure appears limited to Linux systems running affected kernels with the bnxt_re RDMA driver and kernel consumers creating SRQs, specifically the reported NVMe target RDMA use_srq path. General Linux hosts without this driver or RDMA/NVMe target configuration are less likely exposed based on the provided evidence.
Exploitation context
The bundle reports a kernel panic during operational use, not a public exploit. KEV is false, and no cited source states active exploitation. The practical impact shown is availability loss on affected kernel/RDMA storage configurations.
Researcher notes
Evidence is clear on root cause and fix direction but incomplete on severity scoring, exploitability, and affected distribution packages. Analysis should stay tied to bnxt_re SRQ handling and the NVMe target RDMA use_srq scenario unless additional vendor advisories expand scope.
Mitigation direction
- Update to a kernel or vendor package containing the referenced stable fixes.
- Prioritize affected RDMA/NVMe target systems using bnxt_re and use_srq.
- Check Linux distribution advisories for backported fixes and supported upgrade paths.
- If patching is delayed, ask the vendor for supported temporary configuration guidance.
Validation and detection
- Inventory Linux kernel versions against the affected range and fixed vendor builds.
- Identify hosts loading bnxt_re and providing NVMe target RDMA services.
- Check whether kernel consumers create SRQs, including nvmet_rdma use_srq deployments.
- Review kernel logs for divide errors or panic traces involving bnxt_re SRQ creation.
- Confirm the relevant stable commits are present through vendor release notes or source review.
Public sources used
Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.
Conservative CVE-to-ATT&CK context
These mappings and lookup hints may be relevant to the vulnerability behavior, CWE, affected product, or exposure path. Glexia-inferred context is not an official MITRE, ATT&CK, CWE, or CVE Program mapping.
ATT&CK lookup starting points
Use these exact CWE pages and searches to review the Glexia ATT&CK library from this CVE's weakness and description context.
CVE-2025-21885 mapping review
Open the CVE-to-ATT&CK bridge for reviewed, inferred, or future official mappings tied to this CVE.
Open ATT&CK lookup- Severity
- Unknown
- CVSS
- Not scored
- Known Exploited
- No
- Published
CNA and ADP enrichment extracted from CVE v5
These fields come from the CVE record and ADP containers, not from Glexia's Take. They preserve time-varying source decisions such as CISA SSVC, KEV status, CVSS metrics, and provider references.
Vulnerability timeline
Timeline events are normalized from CVE metadata, CNA source timelines, ADP timelines, and KEV metadata when present.
- CVE reservedCVE Program
The CVE ID was reserved by the assigning CNA.
- CVE publishedCVE Program
The CVE record was published.
- CVE updatedCVE Program
The CVE record metadata indicates this as the latest update time.
Source materials
- CVE List V5 sourceCVE List V5
- https://git.kernel.org/stable/c/722c3db62bf60cd23acbdc8c4f445bfedae4498eCVE reference, Linux
- https://git.kernel.org/stable/c/2cf8e6b52aecb8fbb71c41fe5add3212814031a2CVE reference, Linux
- https://git.kernel.org/stable/c/b66535356a4834a234f99e16a97eb51f2c6c5a7dCVE reference, Linux
Products and packages named in the record
CWE details
CWE links open Glexia weakness intelligence pages with official CWE context, developer remediation guidance, and related CVE mappings.