The Linux kernel bnxt_en driver had a flaw in the XDP_TX path where event flags were cleared incorrectly during the bnxt_rx_xdp() processing. Specifically, if the BNXT_TX_EVENT flag was set indicating pending XDP_TX packets, it could be cleared prematurely if the TX ring was full, causing the TX producer to advance without ringing the TX doorbell. This results in the RX ring associated with the TX XDP ring becoming empty and packets being dropped because the driver stops refilling the RX ring. The fix ensures BNXT_RX_EVENT is only cleared after a successful __bnxt_xmit_xdp() call, preventing this deadlock condition.

This vulnerability causes a denial of service condition where the RX ring becomes empty and incoming packets are dropped, impacting network traffic handling on affected systems. There is no confidentiality or integrity impact reported. The issue leads to availability degradation due to dropped packets and stalled network processing.

A fix for this vulnerability has been implemented in the Linux kernel bnxt_en driver. Users should apply the official kernel updates that include this patch. Since no vendor advisory or patch links are provided, check the Linux kernel mailing lists or distribution security advisories for the relevant fixed kernel versions. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance.