---
id: CVE-2025-71137
title: 'octeontx2-pf: fix "UBSAN: shift-out-of-bounds error"'
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  octeontx2-pf: fix "UBSAN: shift-out-of-bounds error"

  This patch ensures that the RX ring size (rx_pending) is not
  set below the permitted length. This avoids UBSAN
  shi…
severity: none
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= d45d8979840d9c9ac93d3fe8cfc8e794b7228445 <
    5d8dfa3abb9a845302e021cf9c92d941abbc011a
  - >-
    Linux >= d45d8979840d9c9ac93d3fe8cfc8e794b7228445 <
    4cc4cfe4d23c883120b6f3d41145edbaa281f2ab
  - >-
    Linux >= d45d8979840d9c9ac93d3fe8cfc8e794b7228445 <
    658caf3b8aad65f8b8e102670ca4f68c7030f655
  - >-
    Linux >= d45d8979840d9c9ac93d3fe8cfc8e794b7228445 <
    b23a2e15589466a027c9baa3fb5813c9f6a6c6dc
  - >-
    Linux >= d45d8979840d9c9ac93d3fe8cfc8e794b7228445 <
    aa743b0d98448282b2cb37356db8db2a48524624
  - >-
    Linux >= d45d8979840d9c9ac93d3fe8cfc8e794b7228445 <
    442848e457f5a9f71a4e7e14d24d73dae278ebe3
  - >-
    Linux >= d45d8979840d9c9ac93d3fe8cfc8e794b7228445 <
    85f4b0c650d9f9db10bda8d3acfa1af83bf78cf7
  - Linux 5.6
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: partial
  timestamp: '2026-11-05T21:14:36.710705Z'
published: '2026-01-14'
updated: '2026-11-05'
sourceUpdated: '2026-11-05T21:23:09.308Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2025-71137'
references:
  - url: 'https://git.kernel.org/stable/c/5d8dfa3abb9a845302e021cf9c92d941abbc011a'
  - url: 'https://git.kernel.org/stable/c/4cc4cfe4d23c883120b6f3d41145edbaa281f2ab'
  - url: 'https://git.kernel.org/stable/c/658caf3b8aad65f8b8e102670ca4f68c7030f655'
  - url: 'https://git.kernel.org/stable/c/b23a2e15589466a027c9baa3fb5813c9f6a6c6dc'
  - url: 'https://git.kernel.org/stable/c/aa743b0d98448282b2cb37356db8db2a48524624'
  - url: 'https://git.kernel.org/stable/c/442848e457f5a9f71a4e7e14d24d73dae278ebe3'
  - url: 'https://git.kernel.org/stable/c/85f4b0c650d9f9db10bda8d3acfa1af83bf78cf7'
tags:
  - cve.org
epss: 0.00188
epssPercentile: 0.08478
ingestedAt: '2026-11-05T22:38:32.052Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

octeontx2-pf: fix "UBSAN: shift-out-of-bounds error"

This patch ensures that the RX ring size (rx_pending) is not
set below the permitted length. This avoids UBSAN
shift-out-of-bounds errors when users passes small or zero
ring sizes via ethtool -G.

## Affected

- `Linux >= d45d8979840d9c9ac93d3fe8cfc8e794b7228445 < 5d8dfa3abb9a845302e021cf9c92d941abbc011a`
- `Linux >= d45d8979840d9c9ac93d3fe8cfc8e794b7228445 < 4cc4cfe4d23c883120b6f3d41145edbaa281f2ab`
- `Linux >= d45d8979840d9c9ac93d3fe8cfc8e794b7228445 < 658caf3b8aad65f8b8e102670ca4f68c7030f655`
- `Linux >= d45d8979840d9c9ac93d3fe8cfc8e794b7228445 < b23a2e15589466a027c9baa3fb5813c9f6a6c6dc`
- `Linux >= d45d8979840d9c9ac93d3fe8cfc8e794b7228445 < aa743b0d98448282b2cb37356db8db2a48524624`
- `Linux >= d45d8979840d9c9ac93d3fe8cfc8e794b7228445 < 442848e457f5a9f71a4e7e14d24d73dae278ebe3`
- `Linux >= d45d8979840d9c9ac93d3fe8cfc8e794b7228445 < 85f4b0c650d9f9db10bda8d3acfa1af83bf78cf7`
- `Linux 5.6`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.