In the Linux kernel, the following vulnerability has been resolved:
net: openvswitch: Fix the dead loop of MPLS parse
The unexpected MPLS packet may not end with the bottom label stack. When there are many stacks, The label count value has wrapped around. A dead loop occurs, soft lockup/CPU stuck finally.
stack backtrace: UBSAN: array-index-out-of-bounds in /build/linux-0Pa0xK/linux-5.15.0/net/openvswitch/flow.c:662:26 index -1 is out of range for type '__be32 [3]' CPU: 34 PID: 0 Comm: swapper/34 Kdump: loaded Tainted: G OE 5.15.0-121-generic #131-Ubuntu Hardware name: Dell Inc. PowerEdge C6420/0JP9TF, BIOS 2.12.2 07/14/2021 Call Trace: <IRQ> show_stack+0x52/0x5c dump_stack_lvl+0x4a/0x63 dump_stack+0x10/0x16 ubsan_epilogue+0x9/0x36 __ubsan_handle_out_of_bounds.cold+0x44/0x49 key_extract_l3l4+0x82a/0x840 [openvswitch] ? kfree_skbmem+0x52/0xa0 key_extract+0x9c/0x2b0 [openvswitch] ovs_flow_key_extract+0x124/0x350 [openvswitch] ovs_vport_receive+0x61/0xd0 [openvswitch] ? kernel_init_free_pages.part.0+0x4a/0x70 ? get_page_from_freelist+0x353/0x540 netdev_port_receive+0xc4/0x180 [openvswitch] ? netdev_port_receive+0x180/0x180 [openvswitch] netdev_frame_hook+0x1f/0x40 [openvswitch] __netif_receive_skb_core.constprop.0+0x23a/0xf00 __netif_receive_skb_list_core+0xfa/0x240 netif_receive_skb_list_internal+0x18e/0x2a0 napi_complete_done+0x7a/0x1c0 bnxt_poll+0x155/0x1c0 [bnxt_en] __napi_poll+0x30/0x180 net_rx_action+0x126/0x280 ? bnxt_msix+0x67/0x80 [bnxt_en] handle_softirqs+0xda/0x2d0 irq_exit_rcu+0x96/0xc0 common_interrupt+0x8e/0xa0 </IRQ>
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfoUpgrade kernel-livepatch-5.15.186-128.192Upgrade kernel-livepatch-5.10.239-236.958Upgrade bpftool-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-headersUpgrade python-perf-debuginfoUpgrade kernel-develUpgrade perfUpgrade python-perfUpgrade perf-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade bpftoolUpgrade kernel-tools-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade kernel-tools | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade kernel-develUpgrade kernel-modules-extra-commonUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-libbpf-debuginfoUpgrade perf6.12-debuginfoUpgrade kernel-tools-debuginfoUpgrade python3-perfUpgrade python3-perf6.12-debuginfoUpgrade kernel6.12-debuginfo-common-x86_64Upgrade kernel-tools-develUpgrade perfUpgrade kernel-livepatch-6.1.144-170.251Upgrade kernel-livepatch-6.12.35-55.103Upgrade kernel-libbpfUpgrade perf-debuginfoUpgrade kernel6.12-modules-extraUpgrade kernel-debuginfoUpgrade python3-perf6.12Upgrade kernelUpgrade bpftool-debuginfoUpgrade kernel-libbpf-staticUpgrade kernel-libbpf-develUpgrade bpftoolUpgrade python3-perf-debuginfoUpgrade kernel6.12-debuginfo-common-aarch64Upgrade kernel6.12-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade perf6.12Upgrade kernel-toolsUpgrade kernel6.12Upgrade kernel-headersUpgrade kernel-modules-extra | Aug 5, 2025 | Jul 3, 2025 |
| Debian | — | Upgrade linux-6.1Upgrade linux | Jul 4, 2025 | Jul 4, 2025 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernelUpgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade bpftool | Dec 12, 2025 | Nov 11, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade bpftoolUpgrade kernel-toolsUpgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade kernel | Nov 12, 2025 | Nov 11, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade kernelUpgrade kernel-tools-libsUpgrade python3-perfUpgrade bpftoolUpgrade kernel-toolsUpgrade kernel-abi-stablelists | Nov 21, 2025 | Nov 11, 2025 |
| Oracle_linux | — | Upgrade kernel-uek | Sep 10, 2025 | Jul 3, 2025 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jul 3, 2025 |
| Suse | — | Upgrade kernel-default-base-rebuildUpgrade kernel-sourceUpgrade kernel-rt-livepatch-develUpgrade dtb-exynosUpgrade kernel-defaultUpgrade kernel-source-vanillaUpgrade kernel-docsUpgrade kernel-kvmsmallUpgrade kernel-rt-optionalUpgrade kselftests-kmp-azureUpgrade cluster-md-kmp-defaultUpgrade reiserfs-kmp-64kbUpgrade kernel-obs-buildUpgrade kernel-default-vdsoUpgrade kernel-64kb-extraUpgrade gfs2-kmp-defaultUpgrade dtb-alteraUpgrade ocfs2-kmp-64kbUpgrade kernel-syms-rtUpgrade kernel-rtUpgrade dlm-kmp-rtUpgrade kernel-source-rtUpgrade kernel-syms-azureUpgrade kernel-docs-htmlUpgrade kernel-azureUpgrade kernel-default-livepatch-develUpgrade dtb-lgUpgrade dtb-freescaleUpgrade kernel-source-azureUpgrade kernel-64kbUpgrade kernel-64kb-develUpgrade kernel-default-develUpgrade kselftests-kmp-rtUpgrade reiserfs-kmp-rtUpgrade kernel-default-extraUpgrade kernel-devel-rtUpgrade gfs2-kmp-rtUpgrade kernel-debugUpgrade ocfs2-kmp-azureUpgrade gfs2-kmp-azureUpgrade kernel-kvmsmall-develUpgrade gfs2-kmp-64kbUpgrade kernel-zfcpdumpUpgrade kernel-default-baseUpgrade dtb-armUpgrade dtb-marvellUpgrade kernel-rt_debugUpgrade dtb-amazonUpgrade dtb-caviumUpgrade dtb-renesasUpgrade dtb-appleUpgrade dlm-kmp-64kbUpgrade ocfs2-kmp-defaultUpgrade dtb-apmUpgrade kernel-obs-qaUpgrade kernel-azure-extraUpgrade dtb-allwinnerUpgrade dtb-xilinxUpgrade ocfs2-kmp-rtUpgrade kernel-default-livepatchUpgrade kernel-default-optionalUpgrade kernel-symsUpgrade dtb-hisiliconUpgrade reiserfs-kmp-defaultUpgrade cluster-md-kmp-rtUpgrade dlm-kmp-azureUpgrade dlm-kmp-defaultUpgrade cluster-md-kmp-azureUpgrade kselftests-kmp-defaultUpgrade kernel-rt-develUpgrade dtb-broadcomUpgrade dtb-socionextUpgrade kernel-rt-livepatchUpgrade kernel-64kb-optionalUpgrade kernel-develUpgrade dtb-amdUpgrade kernel-debug-develUpgrade dtb-mediatekUpgrade dtb-nvidiaUpgrade kernel-azure-vdsoUpgrade kernel-rt-extraUpgrade dtb-amlogicUpgrade kernel-azure-develUpgrade kernel-kvmsmall-vdsoUpgrade dtb-qcomUpgrade dtb-sprdUpgrade kernel-devel-azureUpgrade kernel-debug-vdsoUpgrade reiserfs-kmp-azureUpgrade kselftests-kmp-64kbUpgrade kernel-rt_debug-develUpgrade kernel-macrosUpgrade kernel-rt-vdsoUpgrade kernel-azure-optionalUpgrade dtb-rockchipUpgrade cluster-md-kmp-64kbUpgrade kernel-rt_debug-vdso | Dec 5, 2025 | Sep 18, 2025 |
| Ubuntu | — | Upgrade linux-image-intel-iotg-5.15Upgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-6.14.0-1013-oracleUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-5.15.0-1034-nvidia-tegra-igx-rtUpgrade linux-image-5.15.0-1075-gkeopUpgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-5.15.0-156-generic-lpaeUpgrade linux-image-oracleUpgrade linux-image-5.15.0-1087-intel-iotgUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-5.15.0-1085-intel-iot-realtimeUpgrade linux-image-aws-64k-5.15Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-oem-22.04aUpgrade linux-image-lowlatency-64kUpgrade linux-image-oracle-64kUpgrade linux-image-ibm-classicUpgrade linux-image-realtime-hwe-22.04Upgrade linux-image-azure-fips-6.8Upgrade linux-image-raspi-nolpaeUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-aws-64k-6.8Upgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-intel-iotgUpgrade linux-image-oem-6.14Upgrade linux-image-generic-lpaeUpgrade linux-image-azure-6.8Upgrade linux-image-oem-24.04aUpgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-6.8.0-100-fipsUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-gcp-5.15Upgrade linux-image-5.15.0-1092-aws-64kUpgrade linux-image-oem-22.04Upgrade linux-image-generic-lpae-5.15Upgrade linux-image-azure-cvmUpgrade linux-image-awsUpgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-gke-5.15Upgrade linux-image-ibm-6.8Upgrade linux-image-oem-24.04bUpgrade linux-image-gkeUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-aws-64kUpgrade linux-image-azure-lts-24.04Upgrade linux-image-6.14.0-1016-gcpUpgrade linux-image-6.14.0-1012-realtimeUpgrade linux-image-generic-64k-6.14Upgrade linux-image-5.15.0-1056-xilinx-zynqmpUpgrade linux-image-fips-6.8Upgrade linux-image-5.15.0-1092-awsUpgrade linux-image-aws-5.15Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-fipsUpgrade linux-image-5.15.0-1092-gcpUpgrade linux-image-realtimeUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-5.15.0-156-genericUpgrade linux-image-xilinxUpgrade linux-image-6.14.0-1014-raspiUpgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-fips-5.15Upgrade linux-image-gcp-6.8Upgrade linux-image-5.15.0-1086-ibmUpgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-5.15.0-1086-raspiUpgrade linux-image-5.15.0-1092-aws-fipsUpgrade linux-image-5.15.0-1034-nvidia-tegra-igxUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-gkeop-6.8Upgrade linux-image-6.8.0-1046-azureUpgrade linux-image-aws-lts-22.04Upgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-oem-24.04Upgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-nvidia-tegra-igxUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-ibmUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.8.0-1051-azureUpgrade linux-image-gcpUpgrade linux-image-lowlatencyUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-generic-6.8Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-oem-22.04bUpgrade linux-image-5.15.0-1087-nvidiaUpgrade linux-image-virtualUpgrade linux-image-5.15.0-156-lowlatencyUpgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-raspi-realtimeUpgrade linux-image-6.14.0-32-genericUpgrade linux-image-5.15.0-1090-oracleUpgrade linux-image-azure-5.15Upgrade linux-image-5.15.0-1092-realtimeUpgrade linux-image-5.15.0-1092-gcp-fipsUpgrade linux-image-5.15.0-1088-kvmUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-gcp-6.14Upgrade linux-image-6.14.0-32-generic-64kUpgrade linux-image-6.14.0-1012-oemUpgrade linux-image-6.8.0-1046-awsUpgrade linux-image-virtual-5.15Upgrade linux-image-genericUpgrade linux-image-azureUpgrade linux-image-aws-fips-6.8Upgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-5.15.0-1096-azure-fipsUpgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-gcp-fipsUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-generic-64kUpgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-6.14.0-1013-aws-64kUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-5.15.0-156-lowlatency-64kUpgrade linux-image-raspiUpgrade linux-image-oem-24.04cUpgrade linux-image-oracle-6.8Upgrade linux-image-generic-5.15Upgrade linux-image-azure-lts-22.04Upgrade linux-image-aws-6.8Upgrade linux-image-realtime-6.8.1Upgrade linux-image-5.15.0-1045-nvidia-tegra-rtUpgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-gkeop-5.15Upgrade linux-image-generic-64k-6.8Upgrade linux-image-5.15.0-1089-gkeUpgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-realtime-5.15Upgrade linux-image-raspi-6.14Upgrade linux-image-oem-22.04dUpgrade linux-image-ibm-5.15Upgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-nvidia-tegra-rtUpgrade linux-image-nvidia-6.8Upgrade linux-image-gcp-64k-6.14Upgrade linux-image-kvm-5.15Upgrade linux-image-gkeopUpgrade linux-image-5.15.0-1087-nvidia-lowlatencyUpgrade linux-image-azure-fipsUpgrade linux-image-6.14.0-1016-gcp-64kUpgrade linux-image-lowlatency-6.8Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-aws-lts-24.04Upgrade linux-image-aws-fipsUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-gke-64k-6.8Upgrade linux-image-6.14.0-1013-awsUpgrade linux-image-5.15.0-156-generic-64kUpgrade linux-image-nvidia-5.15Upgrade linux-image-oracle-64k-6.14Upgrade linux-image-nvidia-64kUpgrade linux-image-virtual-6.14Upgrade linux-image-6.14.0-1013-oracle-64kUpgrade linux-image-kvmUpgrade linux-image-gcp-64kUpgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-oracle-6.14Upgrade linux-image-generic-64k-5.15Upgrade linux-image-gcp-64k-6.8Upgrade linux-image-aws-64k-6.14Upgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-gcp-fips-5.15Upgrade linux-image-generic-6.14Upgrade linux-image-azure-fips-5.15Upgrade linux-image-aws-fips-5.15Upgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-5.15.0-156-fipsUpgrade linux-image-nvidia-tegraUpgrade linux-image-5.15.0-1096-azureUpgrade linux-image-nvidiaUpgrade linux-image-azure-6.14Upgrade linux-image-gke-64kUpgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-virtual-6.8Upgrade linux-image-raspi-realtime-6.8 | Jul 7, 2025 | Jul 3, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jul 16, 2025 | Jul 3, 2025 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub