In the Linux kernel, the following vulnerability has been resolved:
ionic: fix use after netif_napi_del()
When queues are started, netif_napi_add() and napi_enable() are called. If there are 4 queues and only 3 queues are used for the current configuration, only 3 queues' napi should be registered and enabled. The ionic_qcq_enable() checks whether the .poll pointer is not NULL for enabling only the using queue' napi. Unused queues' napi will not be registered by netif_napi_add(), so the .poll pointer indicates NULL. But it couldn't distinguish whether the napi was unregistered or not because netif_napi_del() doesn't reset the .poll pointer to NULL. So, ionic_qcq_enable() calls napi_enable() for the queue, which was unregistered by netif_napi_del().
Reproducer: ethtool -L <interface name> rx 1 tx 1 combined 0 ethtool -L <interface name> rx 0 tx 0 combined 1 ethtool -L <interface name> rx 0 tx 0 combined 4
Splat looks like: kernel BUG at net/core/dev.c:6666! Oops: invalid opcode: 0000 [#1] PREEMPT SMP NOPTI CPU: 3 PID: 1057 Comm: kworker/3:3 Not tainted 6.10.0-rc2+ #16 Workqueue: events ionic_lif_deferred_work [ionic] RIP: 0010:napi_enable+0x3b/0x40 Code: 48 89 c2 48 83 e2 f6 80 b9 61 09 00 00 00 74 0d 48 83 bf 60 01 00 00 00 74 03 80 ce 01 f0 4f RSP: 0018:ffffb6ed83227d48 EFLAGS: 00010246 RAX: 0000000000000000 RBX: ffff97560cda0828 RCX: 0000000000000029 RDX: 0000000000000001 RSI: 0000000000000000 RDI: ffff97560cda0a28 RBP: ffffb6ed83227d50 R08: 0000000000000400 R09: 0000000000000001 R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000000 R13: ffff97560ce3c1a0 R14: 0000000000000000 R15: ffff975613ba0a20 FS: 0000000000000000(0000) GS:ffff975d5f780000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f8f734ee200 CR3: 0000000103e50000 CR4: 00000000007506f0 PKRU: 55555554 Call Trace: <TASK> ? die+0x33/0x90 ? do_trap+0xd9/0x100 ? napi_enable+0x3b/0x40 ? do_error_trap+0x83/0xb0 ? napi_enable+0x3b/0x40 ? napi_enable+0x3b/0x40 ? exc_invalid_op+0x4e/0x70 ? napi_enable+0x3b/0x40 ? asm_exc_invalid_op+0x16/0x20 ? napi_enable+0x3b/0x40 ionic_qcq_enable+0xb7/0x180 [ionic 59bdfc8a035436e1c4224ff7d10789e3f14643f8] ionic_start_queues+0xc4/0x290 [ionic 59bdfc8a035436e1c4224ff7d10789e3f14643f8] ionic_link_status_check+0x11c/0x170 [ionic 59bdfc8a035436e1c4224ff7d10789e3f14643f8] ionic_lif_deferred_work+0x129/0x280 [ionic 59bdfc8a035436e1c4224ff7d10789e3f14643f8] process_one_work+0x145/0x360 worker_thread+0x2bb/0x3d0 ? __pfx_worker_thread+0x10/0x10 kthread+0xcc/0x100 ? __pfx_kthread+0x10/0x10 ret_from_fork+0x2d/0x50 ? __pfx_kthread+0x10/0x10 ret_from_fork_asm+0x1a/0x30
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-zfcpdump-devel-matchedUpgrade kernel-rt-modules-extraUpgrade kernel-64k-modules-extraUpgrade rvUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernel-64k-develUpgrade kernel-develUpgrade kernel-64k-debug-develUpgrade kernel-64k-debug-modulesUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-coreUpgrade kernel-debugUpgrade kernel-docUpgrade kernel-modules-extraUpgrade bpftoolUpgrade kernel-rt-develUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-debug-modules-coreUpgrade kernel-toolsUpgrade perfUpgrade kernel-64k-debug-modules-coreUpgrade kernel-rtUpgrade kernel-rt-debug-coreUpgrade kernel-debug-modules-coreUpgrade kernel-debug-uki-virtUpgrade kernel-rt-modulesUpgrade kernel-rt-debugUpgrade kernel-rt-kvmUpgrade kernel-64k-modules-coreUpgrade kernel-debug-coreUpgrade kernelUpgrade kernel-debug-modulesUpgrade kernel-coreUpgrade kernel-rt-debug-kvmUpgrade kernel-64k-coreUpgrade kernel-64k-debug-modules-extraUpgrade kernel-64k-modulesUpgrade rtlaUpgrade kernel-zfcpdump-coreUpgrade kernel-headersUpgrade libperfUpgrade kernel-64k-debugUpgrade kernel-zfcpdump-modulesUpgrade kernel-debug-develUpgrade kernel-devel-matchedUpgrade kernel-64k-debug-coreUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-64k-devel-matchedUpgrade kernel-debug-modules-extraUpgrade kernel-cross-headersUpgrade kernel-rt-modules-coreUpgrade kernel-modules-coreUpgrade kernel-modulesUpgrade kernel-debug-devel-matchedUpgrade kernel-rt-debug-develUpgrade kernel-zfcpdumpUpgrade kernel-abi-stablelistsUpgrade kernel-64kUpgrade kernel-uki-virtUpgrade kernel-tools-libs-develUpgrade kernel-zfcpdump-devel | Aug 12, 2024 | Jul 12, 2024 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Jul 17, 2024 | Jul 12, 2024 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Aug 16, 2024 | Jul 12, 2024 |
| Redhat_linux | — | No solution existsUpgrade kernelUpgrade kernel-rt | Aug 12, 2024 | Jul 12, 2024 |
| Rocky_linux | — | Upgrade kernel-develUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-debuginfoUpgrade perf-debuginfoUpgrade kernel-zfcpdump-modules-extraUpgrade perfUpgrade kernel-modulesUpgrade kernel-rt-debugUpgrade kernel-toolsUpgrade kernel-zfcpdump-debuginfoUpgrade kernel-rt-coreUpgrade kernel-debug-coreUpgrade kernel-rtUpgrade kernel-debugUpgrade rvUpgrade bpftoolUpgrade python3-perfUpgrade kernel-debug-uki-virtUpgrade libperfUpgrade kernel-rt-modulesUpgrade kernel-rt-debug-modules-coreUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-develUpgrade kernel-rt-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-uki-virtUpgrade kernel-rt-kvmUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-zfcpdump-modulesUpgrade kernel-rt-modules-coreUpgrade kernel-rt-debug-coreUpgrade kernel-rt-debuginfo-common-x86_64Upgrade bpftool-debuginfoUpgrade kernel-debug-debuginfoUpgrade kernel-cross-headersUpgrade rtlaUpgrade kernel-rt-debug-debuginfoUpgrade kernel-zfcpdumpUpgrade kernel-modules-extraUpgrade kernel-coreUpgrade kernel-tools-libsUpgrade libperf-debuginfoUpgrade kernel-rt-debug-modulesUpgrade kernel-devel-matchedUpgrade kernelUpgrade kernel-debug-modulesUpgrade kernel-rt-debug-develUpgrade kernel-modules-coreUpgrade kernel-rt-modules-extraUpgrade kernel-headersUpgrade kernel-debug-modules-coreUpgrade kernel-rt-debug-kvmUpgrade kernel-debug-modules-extraUpgrade kernel-debug-devel-matchedUpgrade kernel-debug-develUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-tools-libs-develUpgrade kernel-zfcpdump-develUpgrade python3-perf-debuginfoUpgrade kernel-zfcpdump-core | Aug 22, 2024 | Jul 12, 2024 |
| Suse | — | Upgrade kernel-source-rtUpgrade dtb-amdUpgrade kernel-obs-buildUpgrade kernel-devel-rtUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-docs-htmlUpgrade dtb-renesasUpgrade dlm-kmp-defaultUpgrade dtb-socionextUpgrade kernel-64kb-optionalUpgrade kernel-default-baseUpgrade kernel-azureUpgrade dtb-allwinnerUpgrade dtb-armUpgrade kernel-debugUpgrade kernel-source-vanillaUpgrade ocfs2-kmp-azureUpgrade ocfs2-kmp-defaultUpgrade dtb-caviumUpgrade kselftests-kmp-azureUpgrade kernel-64kb-develUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-rt_debugUpgrade dtb-sprdUpgrade kernel-defaultUpgrade kernel-develUpgrade dtb-xilinxUpgrade dlm-kmp-azureUpgrade kernel-default-optionalUpgrade dlm-kmp-rtUpgrade cluster-md-kmp-64kbUpgrade gfs2-kmp-defaultUpgrade dtb-nvidiaUpgrade kselftests-kmp-rtUpgrade dtb-appleUpgrade kernel-default-livepatch-develUpgrade dtb-marvellUpgrade kernel-azure-extraUpgrade gfs2-kmp-azureUpgrade kernel-rt-optionalUpgrade dtb-broadcomUpgrade kernel-debug-develUpgrade reiserfs-kmp-64kbUpgrade kernel-rt-extraUpgrade reiserfs-kmp-defaultUpgrade kernel-docsUpgrade kernel-debug-vdsoUpgrade reiserfs-kmp-rtUpgrade kselftests-kmp-defaultUpgrade kernel-64kb-extraUpgrade dtb-hisiliconUpgrade kernel-default-vdsoUpgrade kernel-azure-vdsoUpgrade dtb-lgUpgrade kernel-rt_debug-develUpgrade cluster-md-kmp-defaultUpgrade dtb-qcomUpgrade kernel-syms-azureUpgrade dtb-rockchipUpgrade cluster-md-kmp-azureUpgrade kernel-zfcpdumpUpgrade ocfs2-kmp-rtUpgrade gfs2-kmp-64kbUpgrade kernel-sourceUpgrade dtb-alteraUpgrade kernel-rt-develUpgrade kernel-azure-develUpgrade cluster-md-kmp-rtUpgrade kernel-default-extraUpgrade kernel-azure-livepatch-develUpgrade kernel-obs-qaUpgrade dtb-mediatekUpgrade kernel-default-base-rebuildUpgrade ocfs2-kmp-64kbUpgrade kernel-kvmsmall-vdsoUpgrade kernel-syms-rtUpgrade kernel-source-azureUpgrade dtb-apmUpgrade dlm-kmp-64kbUpgrade kernel-debug-livepatch-develUpgrade dtb-amlogicUpgrade kernel-azure-optionalUpgrade dtb-exynosUpgrade kernel-64kb-livepatch-develUpgrade kselftests-kmp-64kbUpgrade kernel-rtUpgrade gfs2-kmp-rtUpgrade kernel-rt-livepatchUpgrade kernel-default-develUpgrade kernel-rt-vdsoUpgrade kernel-macrosUpgrade kernel-kvmsmall-develUpgrade kernel-kvmsmallUpgrade dtb-amazonUpgrade kernel-rt_debug-vdsoUpgrade reiserfs-kmp-azureUpgrade kernel-default-livepatchUpgrade dtb-freescaleUpgrade kernel-symsUpgrade kernel-64kbUpgrade kernel-rt-livepatch-develUpgrade kernel-devel-azure | Aug 8, 2024 | Jul 12, 2024 |
| Ubuntu | — | Upgrade linux-image-oem-22.04cUpgrade linux-image-5.15.0-121-genericUpgrade linux-image-gke-5.15Upgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-oem-22.04bUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-5.4.0-195-genericUpgrade linux-image-oracle-64kUpgrade linux-image-5.15.0-1035-xilinx-zynqmpUpgrade linux-image-bluefieldUpgrade linux-image-nvidia-64kUpgrade linux-image-6.8.0-44-lowlatencyUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-raspi2Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-aws-lts-22.04Upgrade linux-image-6.8.0-1011-raspiUpgrade linux-image-5.4.0-1136-gcpUpgrade linux-image-5.4.0-1051-xilinx-zynqmpUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-azure-lts-22.04Upgrade linux-image-6.8.0-1013-nvidia-64kUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-oem-osp1Upgrade linux-image-raspi-hwe-18.04Upgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-intelUpgrade linux-image-6.8.0-1013-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-44-lowlatency-64kUpgrade linux-image-5.15.0-1072-azureUpgrade linux-image-5.15.0-121-lowlatencyUpgrade linux-image-generic-lpaeUpgrade linux-image-generic-64kUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-intel-iotgUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.4.0-1132-awsUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-5.4.0-1116-raspiUpgrade linux-image-genericUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.8.0-1014-azureUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-5.15.0-1068-gcpUpgrade linux-image-oem-20.04Upgrade linux-image-5.15.0-1062-raspiUpgrade linux-image-azure-lts-20.04Upgrade linux-image-gkeUpgrade linux-image-6.8.0-1012-oracle-64kUpgrade linux-image-5.15.0-1062-ibmUpgrade linux-image-5.15.0-1052-gkeopUpgrade linux-image-oracleUpgrade linux-image-virtualUpgrade linux-image-oem-20.04cUpgrade linux-image-6.8.0-1013-nvidiaUpgrade linux-image-raspi2-hwe-18.04Upgrade linux-image-5.4.0-195-generic-lpaeUpgrade linux-image-ibm-classicUpgrade linux-image-oem-20.04dUpgrade linux-image-6.8.0-1010-gkeUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-5.4.0-1137-azureUpgrade linux-image-azure-cvmUpgrade linux-image-5.15.0-121-generic-lpaeUpgrade linux-image-gkeopUpgrade linux-image-gkeop-5.4Upgrade linux-image-kvmUpgrade linux-image-5.4.0-195-lowlatencyUpgrade linux-image-5.15.0-1066-kvmUpgrade linux-image-gcpUpgrade linux-image-lowlatencyUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-raspiUpgrade linux-image-5.15.0-121-generic-64kUpgrade linux-image-5.4.0-1099-gkeopUpgrade linux-image-5.4.0-1120-kvmUpgrade linux-image-6.8.0-45-generic-64kUpgrade linux-image-gkeop-5.15Upgrade linux-image-oem-22.04dUpgrade linux-image-5.15.0-1067-oracleUpgrade linux-image-5.4.0-1043-iotUpgrade linux-image-5.15.0-121-lowlatency-64kUpgrade linux-image-6.8.0-45-genericUpgrade linux-image-5.4.0-1079-ibmUpgrade linux-image-5.15.0-1066-gkeUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-nvidia-6.8Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.8.0-1013-nvidia-lowlatencyUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.15.0-1064-nvidia-lowlatencyUpgrade linux-image-5.15.0-1064-nvidiaUpgrade linux-image-aws-lts-20.04Upgrade linux-image-5.4.0-1092-bluefieldUpgrade linux-image-oem-22.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-oem-22.04aUpgrade linux-image-oemUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-5.15.0-1072-azure-fdeUpgrade linux-image-raspi-nolpaeUpgrade linux-image-oem-20.04bUpgrade linux-image-6.8.0-1012-oemUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-6.8.0-1015-awsUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.15.0-1064-intel-iotgUpgrade linux-image-azure-fdeUpgrade linux-image-nvidiaUpgrade linux-image-6.8.0-44-generic-64kUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-6.8.0-1014-azure-fdeUpgrade linux-image-5.15.0-1069-awsUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-5.4.0-1131-oracleUpgrade linux-image-6.8.0-1012-oracleUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-6.8.0-1012-ibmUpgrade linux-image-azureUpgrade linux-image-awsUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-ibmUpgrade linux-image-6.8.0-1014-gcpUpgrade linux-image-6.8.0-44-generic | Sep 12, 2024 | Jul 12, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 13, 2025 | Jul 12, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub