In the Linux kernel, the following vulnerability has been resolved:
virtio-net: free xsk_buffs on error in virtnet_xsk_pool_enable()
The selftests added to our CI by Bui Quang Minh recently reveals that there is a mem leak on the error path of virtnet_xsk_pool_enable():
unreferenced object 0xffff88800a68a000 (size 2048): comm "xdp_helper", pid 318, jiffies 4294692778 hex dump (first 32 bytes): 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ backtrace (crc 0): __kvmalloc_node_noprof+0x402/0x570 virtnet_xsk_pool_enable+0x293/0x6a0 (drivers/net/virtio_net.c:5882) xp_assign_dev+0x369/0x670 (net/xdp/xsk_buff_pool.c:226) xsk_bind+0x6a5/0x1ae0 __sys_bind+0x15e/0x230 __x64_sys_bind+0x72/0xb0 do_syscall_64+0xc1/0x1d0 entry_SYSCALL_64_after_hwframe+0x77/0x7f
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade kernel6.12Upgrade bpftool-debuginfoUpgrade kernel-modules-extra-commonUpgrade kernel-toolsUpgrade perf6.12Upgrade bpftoolUpgrade kernel-libbpf-debuginfoUpgrade python3-perf6.12Upgrade kernel6.12-debuginfo-common-x86_64Upgrade kernel-libbpfUpgrade kernel6.12-debuginfoUpgrade kernel-livepatch-6.12.29-33.102Upgrade kernel-libbpf-staticUpgrade kernel-tools-debuginfoUpgrade kernel6.12-modules-extraUpgrade kernel-develUpgrade kernel-tools-develUpgrade kernel-libbpf-develUpgrade python3-perf6.12-debuginfoUpgrade kernel6.12-debuginfo-common-aarch64Upgrade kernel-headersUpgrade perf6.12-debuginfo | Sep 9, 2025 | May 20, 2025 |
| Debian | — | Upgrade linux | Jul 23, 2026 | Jul 23, 2026 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 20, 2025 |
| Suse | — | Upgrade kernel-source-vanillaUpgrade kernel-docs-htmlUpgrade kernel-develUpgrade kernel-kvmsmall-vdsoUpgrade kernel-64kb-extraUpgrade kernel-default-livepatchUpgrade kernel-defaultUpgrade kernel-docsUpgrade kernel-azureUpgrade kernel-default-vdsoUpgrade kernel-macrosUpgrade kernel-symsUpgrade kernel-sourceUpgrade kernel-kvmsmallUpgrade kernel-azure-extraUpgrade kernel-64kbUpgrade kernel-64kb-develUpgrade kernel-zfcpdumpUpgrade kernel-kvmsmall-develUpgrade kernel-default-develUpgrade kernel-obs-qaUpgrade kernel-devel-azureUpgrade kernel-source-azureUpgrade kernel-azure-vdsoUpgrade kernel-default-extraUpgrade kernel-azure-devel | Dec 5, 2025 | Dec 5, 2025 |
| Ubuntu | — | Upgrade linux-image-6.14.0-1011-oracleUpgrade linux-image-6.14.0-1010-realtimeUpgrade linux-image-azure-6.14Upgrade linux-image-6.14.0-1011-aws-64kUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-oem-24.04aUpgrade linux-image-oracle-64kUpgrade linux-image-6.14.0-28-genericUpgrade linux-image-aws-6.14Upgrade linux-image-6.14.0-1010-oemUpgrade linux-image-gcpUpgrade linux-image-oem-6.14Upgrade linux-image-6.14.0-1011-awsUpgrade linux-image-6.14.0-1010-azureUpgrade linux-image-oracleUpgrade linux-image-6.14.0-1014-gcpUpgrade linux-image-generic-64k-6.14Upgrade linux-image-awsUpgrade linux-image-oem-24.04cUpgrade linux-image-6.14.0-1014-gcp-64kUpgrade linux-image-aws-64k-6.14Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-virtualUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-realtime-6.14Upgrade linux-image-6.14.0-28-generic-64kUpgrade linux-image-aws-64kUpgrade linux-image-oem-24.04Upgrade linux-image-realtimeUpgrade linux-image-raspiUpgrade linux-image-azureUpgrade linux-image-generic-6.14Upgrade linux-image-generic-64kUpgrade linux-image-6.14.0-1011-oracle-64kUpgrade linux-image-oracle-6.14Upgrade linux-image-genericUpgrade linux-image-gcp-6.14Upgrade linux-image-gcp-64kUpgrade linux-image-6.14.0-1012-raspiUpgrade linux-image-gcp-64k-6.14Upgrade linux-image-raspi-6.14Upgrade linux-image-virtual-6.14Upgrade linux-image-oracle-64k-6.14 | Jun 26, 2025 | May 20, 2025 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub