In the Linux kernel, the following vulnerability has been resolved:
ila: block BH in ila_output()
As explained in commit 1378817486d6 ("tipc: block BH before using dst_cache"), net/core/dst_cache.c helpers need to be called with BH disabled.
ila_output() is called from lwtunnel_output() possibly from process context, and under rcu_read_lock().
We might be interrupted by a softirq, re-enter ila_output() and corrupt dst_cache data structures.
Fix the race by using local_bh_disable().
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-tools-develUpgrade kernel-toolsUpgrade kernel-livepatch-4.14.352-267.564Upgrade python-perfUpgrade kernelUpgrade python-perf-debuginfoUpgrade perfUpgrade bpftool-debuginfoUpgrade perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-livepatch-5.15.164-108.161Upgrade kernel-headersUpgrade kernel-livepatch-5.10.223-211.872Upgrade kernel-tools-debuginfoUpgrade kernel-develUpgrade kernel-debuginfoUpgrade bpftoolUpgrade kernel-debuginfo-common-aarch64 | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade perf-debuginfoUpgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-modules-extra-commonUpgrade bpftool-debuginfoUpgrade bpftoolUpgrade kernel-libbpf-develUpgrade kernel-livepatch-6.1.102-108.177Upgrade kernel-tools-debuginfoUpgrade kernelUpgrade kernel-debuginfoUpgrade perfUpgrade kernel-headersUpgrade kernel-develUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-develUpgrade python3-perfUpgrade kernel-modules-extraUpgrade kernel-libbpfUpgrade python3-perf-debuginfoUpgrade kernel-libbpf-static | Oct 16, 2025 | Jul 29, 2024 |
| Debian | — | Upgrade linux-6.1Upgrade linux | Aug 14, 2024 | Jul 29, 2024 |
| Oracle_linux | — | Upgrade kernel-uek | Oct 16, 2024 | Jul 29, 2024 |
| Suse | — | Upgrade kernel-azureUpgrade reiserfs-kmp-defaultUpgrade dlm-kmp-defaultUpgrade dtb-freescaleUpgrade dtb-marvellUpgrade kernel-azure-baseUpgrade kernel-azure-optionalUpgrade kernel-debug-develUpgrade kernel-default-manUpgrade gfs2-kmp-64kbUpgrade kernel-macrosUpgrade kernel-debug-livepatch-develUpgrade kernel-source-vanillaUpgrade cluster-md-kmp-azureUpgrade kernel-rt_debug-develUpgrade kernel-syms-rtUpgrade kernel-azure-vdsoUpgrade kernel-64kb-optionalUpgrade dtb-socionextUpgrade kernel-default-develUpgrade kernel-default-livepatchUpgrade kernel-azure-extraUpgrade kernel-docs-htmlUpgrade dtb-amlogicUpgrade kernel-rt_debug-vdsoUpgrade kselftests-kmp-azureUpgrade kernel-rt-livepatch-develUpgrade kernel-default-livepatch-develUpgrade kernel-rt_debug-livepatch-develUpgrade dtb-lgUpgrade kernel-obs-buildUpgrade kernel-docsUpgrade kernel-rt_debugUpgrade kernel-rt-vdsoUpgrade kernel-64kb-extraUpgrade reiserfs-kmp-64kbUpgrade kernel-rt-optionalUpgrade kernel-debugUpgrade dtb-hisiliconUpgrade kselftests-kmp-rtUpgrade ocfs2-kmp-64kbUpgrade kernel-zfcpdumpUpgrade kernel-default-baseUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-source-rtUpgrade dtb-appleUpgrade dtb-broadcomUpgrade dtb-amazonUpgrade kernel-source-azureUpgrade dtb-amdUpgrade reiserfs-kmp-rtUpgrade dlm-kmp-azureUpgrade kernel-debug-vdsoUpgrade dtb-renesasUpgrade cluster-md-kmp-defaultUpgrade kernel-64kbUpgrade kernel-64kb-livepatch-develUpgrade kernel-kvmsmall-develUpgrade kernel-kvmsmall-vdsoUpgrade kernel-default-extraUpgrade dtb-caviumUpgrade dlm-kmp-rtUpgrade cluster-md-kmp-rtUpgrade kernel-develUpgrade dlm-kmp-64kbUpgrade kernel-syms-azureUpgrade kernel-rt-livepatchUpgrade dtb-exynosUpgrade dtb-allwinnerUpgrade reiserfs-kmp-azureUpgrade dtb-nvidiaUpgrade gfs2-kmp-defaultUpgrade kernel-azure-develUpgrade kernel-obs-qaUpgrade kernel-kvmsmallUpgrade dtb-xilinxUpgrade dtb-alteraUpgrade ocfs2-kmp-defaultUpgrade kernel-symsUpgrade kernel-defaultUpgrade cluster-md-kmp-64kbUpgrade kernel-default-base-rebuildUpgrade gfs2-kmp-rtUpgrade dtb-armUpgrade kernel-devel-rtUpgrade kernel-azure-livepatch-develUpgrade kernel-rtUpgrade kernel-default-optionalUpgrade gfs2-kmp-azureUpgrade kernel-rt-develUpgrade dtb-apmUpgrade ocfs2-kmp-rtUpgrade kselftests-kmp-defaultUpgrade kernel-sourceUpgrade kernel-default-vdsoUpgrade dtb-mediatekUpgrade kernel-rt-extraUpgrade kernel-64kb-develUpgrade kselftests-kmp-64kbUpgrade ocfs2-kmp-azureUpgrade dtb-qcomUpgrade dtb-sprdUpgrade dtb-rockchipUpgrade kernel-devel-azure | Aug 14, 2024 | Jul 29, 2024 |
| Ubuntu | — | Upgrade linux-image-6.8.0-1017-nvidiaUpgrade linux-image-generic-64kUpgrade linux-image-oem-22.04cUpgrade linux-image-5.15.0-1071-gcpUpgrade linux-image-5.4.0-1054-xilinx-zynqmpUpgrade linux-image-6.8.0-48-lowlatencyUpgrade linux-image-5.4.0-1044-iotUpgrade linux-image-5.15.0-125-lowlatencyUpgrade linux-image-5.15.0-1065-raspiUpgrade linux-image-oem-22.04Upgrade linux-image-5.15.0-1065-ibmUpgrade linux-image-5.4.0-1135-awsUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-generic-lpaeUpgrade linux-image-oem-22.04aUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-6.8.0-1017-nvidia-lowlatency-64kUpgrade linux-image-5.15.0-125-lowlatency-64kUpgrade linux-image-5.15.0-1055-gkeopUpgrade linux-image-5.4.0-1140-azureUpgrade linux-image-ibmUpgrade linux-image-6.8.0-1015-oracleUpgrade linux-image-6.8.0-48-generic-64kUpgrade linux-image-azureUpgrade linux-image-6.8.0-1016-gcpUpgrade linux-image-aws-lts-22.04Upgrade linux-image-5.4.0-1123-kvmUpgrade linux-image-5.15.0-1069-gkeUpgrade linux-image-5.15.0-125-generic-lpaeUpgrade linux-image-genericUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-aws-lts-20.04Upgrade linux-image-oemUpgrade linux-image-5.15.0-125-genericUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-5.15.0-1072-awsUpgrade linux-image-5.4.0-200-genericUpgrade linux-image-lowlatency-64kUpgrade linux-image-gkeop-6.8Upgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-gke-5.15Upgrade linux-image-5.15.0-1067-nvidiaUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-virtualUpgrade linux-image-intelUpgrade linux-image-lowlatencyUpgrade linux-image-nvidiaUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-ibm-classicUpgrade linux-image-gkeUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-oem-20.04bUpgrade linux-image-azure-lts-20.04Upgrade linux-image-nvidia-6.8Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-oem-24.04Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-gkeopUpgrade linux-image-intel-iotgUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-gkeop-5.4Upgrade linux-image-5.4.0-1102-gkeopUpgrade linux-image-5.15.0-1067-nvidia-lowlatencyUpgrade linux-image-6.8.0-1002-gkeopUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-azure-lts-22.04Upgrade linux-image-6.8.0-1013-gkeUpgrade linux-image-awsUpgrade linux-image-6.8.0-48-lowlatency-64kUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-kvmUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.4.0-200-lowlatencyUpgrade linux-image-6.8.0-1016-azure-fdeUpgrade linux-image-oem-22.04dUpgrade linux-image-raspiUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-bluefieldUpgrade linux-image-6.8.0-1014-ibmUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.8.0-1014-raspiUpgrade linux-image-6.8.0-1018-awsUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-oem-osp1Upgrade linux-image-5.4.0-1082-ibmUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-oracleUpgrade linux-image-5.4.0-1119-raspiUpgrade linux-image-gcpUpgrade linux-image-6.8.0-1015-oracle-64kUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-azure-fdeUpgrade linux-image-5.15.0-1038-xilinx-zynqmpUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-raspi2Upgrade linux-image-nvidia-64kUpgrade linux-image-raspi-nolpaeUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-azure-cvmUpgrade linux-image-oem-24.04aUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-6.8.0-1016-oemUpgrade linux-image-6.8.0-1017-nvidia-64kUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-5.4.0-1094-bluefieldUpgrade linux-image-oracle-64kUpgrade linux-image-6.8.0-1017-azure-fdeUpgrade linux-image-6.8.0-1017-nvidia-lowlatencyUpgrade linux-image-5.15.0-1078-azureUpgrade linux-image-5.15.0-1069-kvmUpgrade linux-image-5.4.0-1139-gcpUpgrade linux-image-6.8.0-1016-azureUpgrade linux-image-oem-20.04dUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-5.4.0-1134-oracleUpgrade linux-image-gkeop-5.15Upgrade linux-image-6.8.0-48-genericUpgrade linux-image-oem-20.04Upgrade linux-image-5.4.0-200-generic-lpaeUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.8.0-1017-gcpUpgrade linux-image-5.4.0-1139-azureUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-5.15.0-1070-oracleUpgrade linux-image-6.8.0-1017-azureUpgrade linux-image-5.15.0-125-generic-64kUpgrade linux-image-5.15.0-1075-azureUpgrade linux-image-oem-20.04cUpgrade linux-image-oem-22.04bUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-5.15.0-1067-intel-iotg | Nov 4, 2024 | Jul 29, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 13, 2025 | Jul 29, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub