In the Linux kernel, the following vulnerability has been resolved:
virtio_net: Fix error unwinding of XDP initialization
When initializing XDP in virtnet_open(), some rq xdp initialization may hit an error causing net device open failed. However, previous rqs have already initialized XDP and enabled NAPI, which is not the expected behavior. Need to roll back the previous rq initialization to avoid leaks in error unwinding of init code.
Also extract helper functions of disable and enable queue pairs. Use newly introduced disable helper function in error unwinding and virtnet_close. Use enable helper function in virtnet_open.
CVSS Details
- CVSS 3.1 Base Score: 7
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfoUpgrade bpftoolUpgrade bpftool-debuginfoUpgrade kernel-headersUpgrade python-perfUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade python-perf-debuginfoUpgrade perf-debuginfoUpgrade perfUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-develUpgrade kernel-develUpgrade kernel-toolsUpgrade kernel-livepatch-5.15.117-72.142 | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade kernel-libbpf-staticUpgrade bpftool-debuginfoUpgrade kernel-toolsUpgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfo-common-aarch64Upgrade kernel-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-tools-develUpgrade kernel-develUpgrade kernel-livepatch-6.1.34-56.100Upgrade bpftoolUpgrade perf-debuginfoUpgrade kernel-libbpf-develUpgrade python3-perfUpgrade perfUpgrade python3-perf-debuginfoUpgrade kernelUpgrade kernel-libbpf | Oct 16, 2025 | Oct 1, 2025 |
| Debian | — | Upgrade linux | Oct 3, 2025 | Oct 3, 2025 |
| Huawei Euleros 2_0_sp11 | — | Upgrade python3-perfUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade bpftool | Mar 17, 2026 | Mar 17, 2026 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade bpftoolUpgrade kernel-tools-libsUpgrade kernelUpgrade python3-perf | Mar 17, 2026 | Mar 17, 2026 |
| Huawei Euleros 2_0_sp13 | — | Upgrade python3-perfUpgrade kernelUpgrade kernel-toolsUpgrade bpftoolUpgrade kernel-tools-libsUpgrade kernel-abi-stablelists | Feb 3, 2026 | Feb 2, 2026 |
| Redhat_linux | — | No solution exists | Jul 17, 2026 | Oct 1, 2025 |
| Ubuntu | — | Upgrade linuxUpgrade linux-riscv-5.15Upgrade linux-gcpUpgrade linux-gkeopUpgrade linux-nvidia-tegra-igxUpgrade linux-awsUpgrade linux-intel-iot-realtimeUpgrade linux-ibm-5.15Upgrade linux-nvidia-tegra-5.15Upgrade linux-nvidia-tegraUpgrade linux-gkeUpgrade linux-intel-iotg-5.15Upgrade linux-xilinx-zynqmpUpgrade linux-nvidiaUpgrade linux-ibmUpgrade linux-oracleUpgrade linux-lowlatencyUpgrade linux-realtimeUpgrade linux-oracle-5.15Upgrade linux-intel-iotgUpgrade linux-gcp-5.15Upgrade linux-bluefieldUpgrade linux-hwe-5.15Upgrade linux-aws-5.15Upgrade linux-raspiUpgrade linux-azureUpgrade linux-lowlatency-hwe-5.15Upgrade linux-kvmUpgrade linux-azure-5.15 | Oct 10, 2025 | Oct 1, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub