CVE-2025-37911 is a medium severity vulnerability in the Linux kernel's bnxt_en driver. It involves an out-of-bound memcpy() operation during the ethtool -w command when retrieving firmware coredumps. The flaw occurs because the driver copies more data than the allocated buffer size, potentially causing memory corruption. The issue arises from a mismatch between the DMA length returned by firmware and the allocated buffer length. The vulnerability has been fixed by capping the copy length to the buffer size.