In the Linux kernel, the following vulnerability has been resolved:
net: openvswitch: Fix the dead loop of MPLS parse
The unexpected MPLS packet may not end with the bottom label stack. When there are many stacks, The label count value has wrapped around. A dead loop occurs, soft lockup/CPU stuck finally.
stack backtrace: UBSAN: array-index-out-of-bounds in /build/linux-0Pa0xK/linux-5.15.0/net/openvswitch/flow.c:662:26 index -1 is out of range for type '__be32 [3]' CPU: 34 PID: 0 Comm: swapper/34 Kdump: loaded Tainted: G OE 5.15.0-121-generic #131-Ubuntu Hardware name: Dell Inc. PowerEdge C6420/0JP9TF, BIOS 2.12.2 07/14/2021 Call Trace: <IRQ> show_stack+0x52/0x5c dump_stack_lvl+0x4a/0x63 dump_stack+0x10/0x16 ubsan_epilogue+0x9/0x36 __ubsan_handle_out_of_bounds.cold+0x44/0x49 key_extract_l3l4+0x82a/0x840 [openvswitch] ? kfree_skbmem+0x52/0xa0 key_extract+0x9c/0x2b0 [openvswitch] ovs_flow_key_extract+0x124/0x350 [openvswitch] ovs_vport_receive+0x61/0xd0 [openvswitch] ? kernel_init_free_pages.part.0+0x4a/0x70 ? get_page_from_freelist+0x353/0x540 netdev_port_receive+0xc4/0x180 [openvswitch] ? netdev_port_receive+0x180/0x180 [openvswitch] netdev_frame_hook+0x1f/0x40 [openvswitch] __netif_receive_skb_core.constprop.0+0x23a/0xf00 __netif_receive_skb_list_core+0xfa/0x240 netif_receive_skb_list_internal+0x18e/0x2a0 napi_complete_done+0x7a/0x1c0 bnxt_poll+0x155/0x1c0 [bnxt_en] __napi_poll+0x30/0x180 net_rx_action+0x126/0x280 ? bnxt_msix+0x67/0x80 [bnxt_en] handle_softirqs+0xda/0x2d0 irq_exit_rcu+0x96/0xc0 common_interrupt+0x8e/0xa0 </IRQ>
CVSS Details
- CVSS 3.1 Base Score: 9.4
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-tools-develUpgrade kernel-toolsUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade bpftoolUpgrade python-perf-debuginfoUpgrade bpftool-debuginfoUpgrade perfUpgrade kernel-headersUpgrade python-perfUpgrade kernel-debuginfoUpgrade kernel-develUpgrade perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-livepatch-5.10.239-236.958Upgrade kernel-livepatch-5.15.186-128.192 | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade kernel-modules-extra-commonUpgrade perf6.12-debuginfoUpgrade kernel-debuginfoUpgrade kernel-libbpfUpgrade kernel6.12-modules-extraUpgrade kernel-livepatch-6.12.35-55.103Upgrade perfUpgrade python3-perf6.12Upgrade kernel-tools-develUpgrade kernel-tools-debuginfoUpgrade kernel-livepatch-6.1.144-170.251Upgrade python3-perf6.12-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade python3-perfUpgrade kernel-libbpf-debuginfoUpgrade kernel-develUpgrade kernel6.12-debuginfo-common-x86_64Upgrade perf-debuginfoUpgrade kernel-libbpf-develUpgrade kernel6.12-debuginfoUpgrade perf6.12Upgrade kernel-toolsUpgrade python3-perf-debuginfoUpgrade bpftoolUpgrade bpftool-debuginfoUpgrade kernel6.12-debuginfo-common-aarch64Upgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade kernel-headersUpgrade kernel6.12Upgrade kernel-modules-extraUpgrade kernel-libbpf-static | Aug 5, 2025 | Jul 3, 2025 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Jul 4, 2025 | Jul 4, 2025 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernelUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade python3-perfUpgrade bpftoolUpgrade kernel-tools | Dec 12, 2025 | Nov 11, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernelUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade python3-perfUpgrade bpftool | Nov 12, 2025 | Nov 11, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade kernelUpgrade python3-perfUpgrade kernel-tools-libsUpgrade bpftoolUpgrade kernel-abi-stablelistsUpgrade kernel-tools | Nov 21, 2025 | Nov 11, 2025 |
| Oracle_linux | — | Upgrade kernel-uek | Sep 10, 2025 | Jul 3, 2025 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jul 3, 2025 |
| Suse | — | Upgrade kernel-default-livepatchUpgrade kernel-debugUpgrade kernel-develUpgrade dtb-xilinxUpgrade kernel-source-azureUpgrade dlm-kmp-64kbUpgrade kernel-default-baseUpgrade kernel-default-optionalUpgrade dtb-armUpgrade dtb-freescaleUpgrade kernel-default-extraUpgrade kernel-default-livepatch-develUpgrade dtb-hisiliconUpgrade gfs2-kmp-azureUpgrade reiserfs-kmp-rtUpgrade gfs2-kmp-rtUpgrade cluster-md-kmp-rtUpgrade kernel-64kbUpgrade kernel-devel-rtUpgrade dlm-kmp-azureUpgrade ocfs2-kmp-azureUpgrade dtb-amdUpgrade reiserfs-kmp-defaultUpgrade dlm-kmp-defaultUpgrade gfs2-kmp-64kbUpgrade kernel-kvmsmall-develUpgrade dtb-caviumUpgrade kernel-obs-qaUpgrade dtb-amazonUpgrade dtb-appleUpgrade kernel-zfcpdumpUpgrade dtb-lgUpgrade dtb-mediatekUpgrade dtb-socionextUpgrade dtb-broadcomUpgrade kernel-rt-livepatchUpgrade dtb-marvellUpgrade dtb-renesasUpgrade cluster-md-kmp-azureUpgrade ocfs2-kmp-rtUpgrade kernel-rt_debugUpgrade ocfs2-kmp-defaultUpgrade kernel-64kb-optionalUpgrade kernel-64kb-develUpgrade kernel-default-develUpgrade kselftests-kmp-rtUpgrade dtb-apmUpgrade kernel-azure-extraUpgrade kernel-symsUpgrade kselftests-kmp-defaultUpgrade dtb-allwinnerUpgrade kernel-debug-develUpgrade kernel-rt-develUpgrade kernel-kvmsmall-vdsoUpgrade kernel-source-vanillaUpgrade kernel-docsUpgrade kernel-syms-azureUpgrade ocfs2-kmp-64kbUpgrade kselftests-kmp-azureUpgrade kernel-obs-buildUpgrade kernel-defaultUpgrade kernel-syms-rtUpgrade kernel-azure-develUpgrade dlm-kmp-rtUpgrade kernel-rtUpgrade kernel-source-rtUpgrade dtb-qcomUpgrade dtb-amlogicUpgrade dtb-exynosUpgrade kernel-sourceUpgrade kernel-rt-livepatch-develUpgrade kernel-kvmsmallUpgrade cluster-md-kmp-defaultUpgrade reiserfs-kmp-64kbUpgrade kernel-rt-optionalUpgrade kernel-macrosUpgrade kernel-docs-htmlUpgrade kernel-azureUpgrade kernel-azure-vdsoUpgrade kernel-azure-optionalUpgrade kernel-rt-vdsoUpgrade kernel-rt-extraUpgrade dtb-nvidiaUpgrade kselftests-kmp-64kbUpgrade kernel-rt_debug-vdsoUpgrade kernel-default-base-rebuildUpgrade dtb-rockchipUpgrade kernel-debug-vdsoUpgrade kernel-rt_debug-develUpgrade kernel-devel-azureUpgrade reiserfs-kmp-azureUpgrade cluster-md-kmp-64kbUpgrade dtb-sprdUpgrade kernel-default-vdsoUpgrade kernel-64kb-extraUpgrade gfs2-kmp-defaultUpgrade dtb-altera | Dec 5, 2025 | Sep 18, 2025 |
| Ubuntu | — | Upgrade linux-image-gke-6.8Upgrade linux-image-5.15.0-1087-nvidia-lowlatencyUpgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-genericUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-nvidia-64kUpgrade linux-image-ibm-5.15Upgrade linux-image-lowlatency-5.15Upgrade linux-image-6.14.0-1012-oemUpgrade linux-image-lowlatency-6.8Upgrade linux-image-azure-5.15Upgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-raspiUpgrade linux-image-6.14.0-1016-gcp-64kUpgrade linux-image-generic-64kUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-gcp-fipsUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-azureUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-6.14.0-32-generic-64kUpgrade linux-image-6.14.0-1013-aws-64kUpgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-5.15.0-1096-azure-fipsUpgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-nvidiaUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-nvidia-tegraUpgrade linux-image-gcp-6.14Upgrade linux-image-azure-6.14Upgrade linux-image-azure-fips-5.15Upgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-gcp-fips-5.15Upgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-generic-6.14Upgrade linux-image-5.15.0-1090-oracleUpgrade linux-image-6.8.0-100-genericUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-aws-fips-5.15Upgrade linux-image-5.15.0-1089-gkeUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-aws-fips-6.8Upgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-aws-6.8Upgrade linux-image-5.15.0-1096-azureUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-raspi-6.14Upgrade linux-image-oracle-5.15Upgrade linux-image-virtual-5.15Upgrade linux-image-oem-22.04cUpgrade linux-image-oem-22.04dUpgrade linux-image-virtual-6.8Upgrade linux-image-5.15.0-156-fipsUpgrade linux-image-gcp-fips-6.8Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-gke-64kUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-5.15.0-1045-nvidia-tegraUpgrade linux-image-6.14.0-1012-azureUpgrade linux-image-intelUpgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-5.15.0-1092-realtimeUpgrade linux-image-5.15.0-1092-gcp-fipsUpgrade linux-image-gcp-64k-6.14Upgrade linux-image-aws-6.14Upgrade linux-image-6.8.0-1046-awsUpgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-gkeopUpgrade linux-image-raspi-6.8Upgrade linux-image-nvidia-6.8Upgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-kvm-5.15Upgrade linux-image-nvidia-tegra-rtUpgrade linux-image-xilinx-6.8Upgrade linux-image-realtime-6.14Upgrade linux-image-5.15.0-1088-kvmUpgrade linux-image-aws-fipsUpgrade linux-image-gkeop-5.15Upgrade linux-image-oracle-64k-6.14Upgrade linux-image-gke-64k-6.8Upgrade linux-image-generic-64k-6.8Upgrade linux-image-5.15.0-156-generic-64kUpgrade linux-image-6.14.0-1013-awsUpgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-5.15.0-1045-nvidia-tegra-rtUpgrade linux-image-gcp-64kUpgrade linux-image-oracle-6.14Upgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-generic-64k-5.15Upgrade linux-image-5.15.0-156-lowlatency-64kUpgrade linux-image-kvmUpgrade linux-image-6.14.0-1013-oracle-64kUpgrade linux-image-nvidia-5.15Upgrade linux-image-oem-24.04cUpgrade linux-image-virtual-6.14Upgrade linux-image-oracle-6.8Upgrade linux-image-aws-64k-6.14Upgrade linux-image-realtime-5.15Upgrade linux-image-realtime-6.8.1Upgrade linux-image-azure-lts-22.04Upgrade linux-image-azure-fipsUpgrade linux-image-aws-lts-24.04Upgrade linux-image-raspi-5.15Upgrade linux-image-generic-5.15Upgrade linux-image-nvidia-tegra-igxUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-oem-6.14Upgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-awsUpgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-6.14.0-1016-gcpUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-aws-64k-5.15Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-generic-lpaeUpgrade linux-image-ibm-6.8Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-azure-cvmUpgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-fips-6.8Upgrade linux-image-realtimeUpgrade linux-image-5.15.0-1092-gcpUpgrade linux-image-realtime-hwe-22.04Upgrade linux-image-fipsUpgrade linux-image-5.15.0-1034-nvidia-tegra-igxUpgrade linux-image-raspi-nolpaeUpgrade linux-image-lowlatency-64kUpgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-5.15.0-156-genericUpgrade linux-image-6.14.0-1014-raspiUpgrade linux-image-fips-5.15Upgrade linux-image-gcp-6.8Upgrade linux-image-5.15.0-1092-awsUpgrade linux-image-xilinxUpgrade linux-image-5.15.0-1085-intel-iot-realtimeUpgrade linux-image-aws-5.15Upgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-oem-24.04bUpgrade linux-image-6.8.0-100-fipsUpgrade linux-image-5.15.0-1086-ibmUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-ibmUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-intel-iotgUpgrade linux-image-ibm-classicUpgrade linux-image-gke-5.15Upgrade linux-image-gkeUpgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-oem-24.04aUpgrade linux-image-oem-22.04Upgrade linux-image-generic-lpae-5.15Upgrade linux-image-6.14.0-1012-realtimeUpgrade linux-image-5.15.0-1092-aws-64kUpgrade linux-image-gcp-5.15Upgrade linux-image-azure-fips-6.8Upgrade linux-image-aws-64kUpgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-5.15.0-1056-xilinx-zynqmpUpgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-5.15.0-1087-nvidiaUpgrade linux-image-6.8.0-1051-azureUpgrade linux-image-generic-64k-6.14Upgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-oem-22.04bUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-lowlatencyUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-gcpUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-6.14.0-32-genericUpgrade linux-image-5.15.0-1086-raspiUpgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-aws-64k-6.8Upgrade linux-image-6.14.0-1013-oracleUpgrade linux-image-5.15.0-156-generic-lpaeUpgrade linux-image-5.15.0-1087-intel-iotgUpgrade linux-image-5.15.0-1075-gkeopUpgrade linux-image-5.15.0-1034-nvidia-tegra-igx-rtUpgrade linux-image-oracle-64kUpgrade linux-image-oracleUpgrade linux-image-oem-22.04aUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-intel-iotg-5.15Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-azure-lts-24.04Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-azure-6.8Upgrade linux-image-aws-lts-22.04Upgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-6.8.0-1046-azureUpgrade linux-image-5.15.0-1092-aws-fipsUpgrade linux-image-raspi-realtimeUpgrade linux-image-oem-24.04Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-gkeop-6.8Upgrade linux-image-generic-6.8Upgrade linux-image-5.15.0-156-lowlatencyUpgrade linux-image-virtualUpgrade linux-image-generic-64k-hwe-22.04 | Jul 7, 2025 | Jul 3, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jul 16, 2025 | Jul 3, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub