Close Menu
    DevStackTipsDevStackTips
    • Home
    • News & Updates
      1. Tech & Work
      2. View All

      React.js for SaaS Platforms: How Top Development Teams Help Startups Launch Faster

      August 3, 2025

      Upwork Freelancers vs Dedicated React.js Teams: What’s Better for Your Project in 2025?

      August 1, 2025

      Is Agile dead in the age of AI?

      August 1, 2025

      Top 15 Enterprise Use Cases That Justify Hiring Node.js Developers in 2025

      July 31, 2025

      Unplugging these 7 common household devices helped reduce my electricity bills

      August 3, 2025

      DistroWatch Weekly, Issue 1133

      August 3, 2025

      Anthropic beats OpenAI as the top LLM provider for business – and it’s not even close

      August 2, 2025

      I bought Samsung’s Galaxy Watch Ultra 2025 – here’s why I have buyer’s remorse

      August 2, 2025
    • Development
      1. Algorithms & Data Structures
      2. Artificial Intelligence
      3. Back-End Development
      4. Databases
      5. Front-End Development
      6. Libraries & Frameworks
      7. Machine Learning
      8. Security
      9. Software Engineering
      10. Tools & IDEs
      11. Web Design
      12. Web Development
      13. Web Security
      14. Programming Languages
        • PHP
        • JavaScript
      Featured

      The details of TC39’s last meeting

      August 3, 2025
      Recent

      The details of TC39’s last meeting

      August 3, 2025

      Enhancing Laravel Queries with Reusable Scope Patterns

      August 1, 2025

      Everything We Know About Livewire 4

      August 1, 2025
    • Operating Systems
      1. Windows
      2. Linux
      3. macOS
      Featured

      DistroWatch Weekly, Issue 1133

      August 3, 2025
      Recent

      DistroWatch Weekly, Issue 1133

      August 3, 2025

      Newelle, a ‘Virtual Assistant’ for GNOME, Hits Version 1.0

      August 3, 2025

      Bustle – visualize D-Bus activity

      August 3, 2025
    • Learning Resources
      • Books
      • Cheatsheets
      • Tutorials & Guides
    Home»Security»Common Vulnerabilities and Exposures (CVEs)»CVE-2023-53134 – “Broadcom bnxt_en Linux kernel Memory Allocation Vulnerability”

    CVE-2023-53134 – “Broadcom bnxt_en Linux kernel Memory Allocation Vulnerability”

    May 2, 2025

    CVE ID : CVE-2023-53134

    Published : May 2, 2025, 4:15 p.m. | 34 minutes ago

    Description : In the Linux kernel, the following vulnerability has been resolved:

    bnxt_en: Avoid order-5 memory allocation for TPA data

    The driver needs to keep track of all the possible concurrent TPA (GRO/LRO)
    completions on the aggregation ring. On P5 chips, the maximum number
    of concurrent TPA is 256 and the amount of memory we allocate is order-5
    on systems using 4K pages. Memory allocation failure has been reported:

    NetworkManager: page allocation failure: order:5, mode:0x40dc0(GFP_KERNEL|__GFP_COMP|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
    CPU: 15 PID: 2995 Comm: NetworkManager Kdump: loaded Not tainted 5.10.156 #1
    Hardware name: Dell Inc. PowerEdge R660/0M1CC5, BIOS 0.2.25 08/12/2022
    Call Trace:
    dump_stack+0x57/0x6e
    warn_alloc.cold.120+0x7b/0xdd
    ? _cond_resched+0x15/0x30
    ? __alloc_pages_direct_compact+0x15f/0x170
    __alloc_pages_slowpath.constprop.108+0xc58/0xc70
    __alloc_pages_nodemask+0x2d0/0x300
    kmalloc_order+0x24/0xe0
    kmalloc_order_trace+0x19/0x80
    bnxt_alloc_mem+0x1150/0x15c0 [bnxt_en]
    ? bnxt_get_func_stat_ctxs+0x13/0x60 [bnxt_en]
    __bnxt_open_nic+0x12e/0x780 [bnxt_en]
    bnxt_open+0x10b/0x240 [bnxt_en]
    __dev_open+0xe9/0x180
    __dev_change_flags+0x1af/0x220
    dev_change_flags+0x21/0x60
    do_setlink+0x35c/0x1100

    Instead of allocating this big chunk of memory and dividing it up for the
    concurrent TPA instances, allocate each small chunk separately for each
    TPA instance. This will reduce it to order-0 allocations.

    Severity: 0.0 | NA

    Visit the link for more details, such as CVSS details, affected products, timeline, and more…

    Source: Read More

    Facebook Twitter Reddit Email Copy Link
    Previous ArticleCVE-2023-53135 – Riscv Linux Kernel Stack Out-of-Bounds Vulnerability
    Next Article CVE-2023-53132 – “Mellanox MPI3MR Linux Kernel Memory Leak”

    Related Posts

    Common Vulnerabilities and Exposures (CVEs)

    CVE-2025-6754 – “WordPress SEO Metrics Privilege Escalation”

    August 3, 2025
    Common Vulnerabilities and Exposures (CVEs)

    CVE-2025-7710 – “Brave Conversion Engine WordPress Facebook Authentication Bypass”

    August 3, 2025
    Leave A Reply Cancel Reply

    For security, use of Google's reCAPTCHA service is required which is subject to the Google Privacy Policy and Terms of Use.

    Continue Reading

    CVE-2025-3090 – Cisco Device Authentication Bypass Vulnerability

    Common Vulnerabilities and Exposures (CVEs)

    CVE-2018-25110 – Apache Marked ReDoS Vulnerability

    Common Vulnerabilities and Exposures (CVEs)

    Rilasciato Hyprland 0.49: Permessi avanzati e nuove funzionalità per il compositor Wayland dinamico su GNU/Linux

    Linux

    Grounded 2 has gorgeous lighting — the atmosphere pulls me in even more than the first game

    News & Updates

    Highlights

    News & Updates

    My favorite gaming earbuds now come in orange — but they’re missing one crucial thing that would make me grab another pair

    May 15, 2025

    SteelSeries’ new orange GameBuds are stunning, but compatible with basically everything but Xbox. Source: Read…

    Parasoft C/C++test 2025.1, Secure Code Warrior AI Security Rules, and more – Daily News Digest

    June 17, 2025

    ddotlp – smart power management

    July 2, 2025

    CVE-2025-5199 – Canonical Multipass Privilege Escalation Vulnerability

    July 11, 2025
    © DevStackTips 2025. All rights reserved.
    • Contact
    • Privacy Policy

    Type above and press Enter to search. Press Esc to cancel.