In the Linux kernel, the following vulnerability has been resolved:
idpf: fix idpf_vc_core_init error path
In an event where the platform running the device control plane is rebooted, reset is detected on the driver. It releases all the resources and waits for the reset to complete. Once the reset is done, it tries to build the resources back. At this time if the device control plane is not yet started, then the driver timeouts on the virtchnl message and retries to establish the mailbox again.
In the retry flow, mailbox is deinitialized but the mailbox workqueue is still alive and polling for the mailbox message. This results in accessing the released control queue leading to null-ptr-deref. Fix it by unrolling the work queue cancellation and mailbox deinitialization in the reverse order which they got initialized.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-rt-develUpgrade kernel-rt-debugUpgrade kernel-rt-modules-extraUpgrade kernel-docUpgrade kernel-debug-develUpgrade kernel-rt-debug-develUpgrade kernel-debugUpgrade kernel-zfcpdump-develUpgrade kernelUpgrade kernel-rt-coreUpgrade kernel-debug-coreUpgrade python3-perfUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-develUpgrade kernel-tools-libs-develUpgrade perfUpgrade kernel-rt-debug-modules-extraUpgrade kernel-cross-headersUpgrade kernel-tools-libsUpgrade bpftoolUpgrade kernel-zfcpdump-modulesUpgrade kernel-debug-modules-extraUpgrade kernel-zfcpdumpUpgrade kernel-debug-modulesUpgrade kernel-modules-extraUpgrade kernel-modulesUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-debug-coreUpgrade kernel-abi-stablelistsUpgrade kernel-rtUpgrade kernel-coreUpgrade kernel-headersUpgrade kernel-rt-modulesUpgrade kernel-toolsUpgrade kernel-zfcpdump-core | Jul 1, 2025 | Nov 19, 2024 |
| Debian | — | Upgrade linux | Jul 27, 2026 | Jul 27, 2026 |
| Oracle_linux | — | Upgrade kernel | Jun 30, 2025 | Nov 19, 2024 |
| Redhat_linux | — | No solution existsUpgrade kernelUpgrade kernel-rt | Jun 26, 2025 | Nov 19, 2024 |
| Rocky_linux | — | Upgrade kernel-rt-debuginfoUpgrade kernel-rt-debug-modulesUpgrade kernel-debug-coreUpgrade kernel-rtUpgrade kernel-tools-debuginfoUpgrade kernel-debug-modules-extraUpgrade kernel-rt-debug-develUpgrade kernel-toolsUpgrade kernel-rt-debuginfo-common-x86_64Upgrade perfUpgrade kernel-modulesUpgrade bpftool-debuginfoUpgrade perf-debuginfoUpgrade kernel-debug-debuginfoUpgrade kernel-modules-extraUpgrade kernel-rt-debugUpgrade kernel-rt-modulesUpgrade kernel-coreUpgrade kernel-rt-debug-modules-extraUpgrade kernelUpgrade kernel-rt-develUpgrade kernel-rt-kvmUpgrade kernel-rt-debug-kvmUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debug-develUpgrade kernel-debugUpgrade kernel-develUpgrade kernel-rt-modules-extraUpgrade kernel-headersUpgrade kernel-tools-libs-develUpgrade kernel-rt-debug-debuginfoUpgrade kernel-debuginfoUpgrade kernel-rt-coreUpgrade kernel-cross-headersUpgrade python3-perf-debuginfoUpgrade kernel-rt-debug-coreUpgrade bpftoolUpgrade python3-perfUpgrade kernel-debug-modulesUpgrade kernel-tools-libs | Jul 31, 2025 | Jul 29, 2025 |
| Ubuntu | — | Upgrade linux-image-oracle-64kUpgrade linux-image-6.11.0-18-genericUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-azure-fdeUpgrade linux-image-6.11.0-1010-lowlatency-64kUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.8.0-1019-gkeUpgrade linux-image-gcp-64kUpgrade linux-image-oem-24.04aUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-6.11.0-1010-lowlatencyUpgrade linux-image-6.11.0-1015-oemUpgrade linux-image-6.8.0-1024-gcpUpgrade linux-image-5.15.0-1078-gcpUpgrade linux-image-awsUpgrade linux-image-raspiUpgrade linux-image-azureUpgrade linux-image-realtimeUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-gcpUpgrade linux-image-6.8.0-1024-gcp-64kUpgrade linux-image-6.11.0-1009-awsUpgrade linux-image-5.15.0-1076-gkeUpgrade linux-image-6.8.0-1007-gkeopUpgrade linux-image-6.11.0-1011-oracleUpgrade linux-image-6.8.0-1006-gkeopUpgrade linux-image-virtualUpgrade linux-image-6.11.0-1011-oracle-64kUpgrade linux-image-generic-64kUpgrade linux-image-6.11.0-1005-realtimeUpgrade linux-image-oem-24.04bUpgrade linux-image-lowlatency-64kUpgrade linux-image-6.8.0-1025-gcpUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-6.8.0-1025-gcp-64kUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-gke-5.15Upgrade linux-image-oem-24.04Upgrade linux-image-6.11.0-1009-azure-fdeUpgrade linux-image-genericUpgrade linux-image-6.11.0-1009-azureUpgrade linux-image-oracleUpgrade linux-image-6.8.0-1020-gkeUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-6.11.0-1008-raspiUpgrade linux-image-6.11.0-18-generic-64kUpgrade linux-image-6.11.0-1009-gcpUpgrade linux-image-lowlatencyUpgrade linux-image-gkeop-6.8Upgrade linux-image-gkeUpgrade linux-image-gkeop | Feb 20, 2025 | Nov 19, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub