In the Linux kernel, the following vulnerability has been resolved:
idpf: fix UAFs when destroying the queues
The second tagged commit started sometimes (very rarely, but possible) throwing WARNs from net/core/page_pool.c:page_pool_disable_direct_recycling(). Turned out idpf frees interrupt vectors with embedded NAPIs *before* freeing the queues making page_pools' NAPI pointers lead to freed memory before these pools are destroyed by libeth. It's not clear whether there are other accesses to the freed vectors when destroying the queues, but anyway, we usually free queue/interrupt vectors only when the queues are destroyed and the NAPIs are guaranteed to not be referenced anywhere.
Invert the allocation and freeing logic making queue/interrupt vectors be allocated first and freed last. Vectors don't require queues to be present, so this is safe. Additionally, this change allows to remove that useless queue->q_vector pointer cleanup, as vectors are still valid when freeing the queues (+ both are freed within one function, so it's not clear why nullify the pointers at all).
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 27, 2026 | Jul 27, 2026 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rtNo solution exists | May 15, 2025 | Aug 26, 2024 |
| Suse | — | Upgrade kernel-rt-optionalUpgrade dtb-amazonUpgrade kernel-azure-extraUpgrade gfs2-kmp-rtUpgrade kernel-default-livepatch-develUpgrade ocfs2-kmp-rtUpgrade kselftests-kmp-azureUpgrade dlm-kmp-defaultUpgrade kernel-kvmsmall-vdsoUpgrade dtb-amdUpgrade kernel-64kbUpgrade kernel-64kb-optionalUpgrade kernel-default-develUpgrade dtb-appleUpgrade dtb-lgUpgrade dtb-marvellUpgrade cluster-md-kmp-defaultUpgrade kernel-azure-optionalUpgrade kernel-macrosUpgrade reiserfs-kmp-64kbUpgrade kernel-default-livepatchUpgrade dtb-socionextUpgrade kernel-zfcpdumpUpgrade reiserfs-kmp-defaultUpgrade kernel-rt-vdsoUpgrade dtb-freescaleUpgrade kernel-debug-develUpgrade kernel-rt_debug-develUpgrade kernel-source-rtUpgrade kernel-rt_debug-vdsoUpgrade kernel-docs-htmlUpgrade kernel-syms-rtUpgrade kernel-kvmsmall-develUpgrade kernel-azure-vdsoUpgrade kernel-source-vanillaUpgrade gfs2-kmp-64kbUpgrade dtb-hisiliconUpgrade kernel-azureUpgrade kernel-default-baseUpgrade kernel-rt-livepatch-develUpgrade kselftests-kmp-rtUpgrade kernel-rt_debugUpgrade dtb-renesasUpgrade kernel-debugUpgrade gfs2-kmp-defaultUpgrade cluster-md-kmp-azureUpgrade dtb-amlogicUpgrade kernel-debug-vdsoUpgrade kernel-rt_debug-livepatch-develUpgrade dtb-broadcomUpgrade kernel-source-azureUpgrade ocfs2-kmp-64kbUpgrade reiserfs-kmp-rtUpgrade dlm-kmp-64kbUpgrade dtb-sprdUpgrade reiserfs-kmp-azureUpgrade kernel-64kb-extraUpgrade cluster-md-kmp-rtUpgrade dtb-rockchipUpgrade dtb-exynosUpgrade kernel-sourceUpgrade dtb-apmUpgrade kernel-symsUpgrade kernel-defaultUpgrade kernel-rt-livepatchUpgrade kernel-rtUpgrade dlm-kmp-rtUpgrade kernel-obs-buildUpgrade dtb-nvidiaUpgrade dtb-allwinnerUpgrade dlm-kmp-azureUpgrade ocfs2-kmp-azureUpgrade kernel-devel-azureUpgrade kernel-default-optionalUpgrade dtb-mediatekUpgrade dtb-armUpgrade kernel-kvmsmallUpgrade kernel-develUpgrade kernel-default-base-rebuildUpgrade kselftests-kmp-64kbUpgrade dtb-qcomUpgrade dtb-alteraUpgrade kernel-64kb-develUpgrade gfs2-kmp-azureUpgrade kernel-rt-extraUpgrade kernel-devel-rtUpgrade dtb-caviumUpgrade kernel-default-extraUpgrade ocfs2-kmp-defaultUpgrade kernel-rt-develUpgrade kernel-obs-qaUpgrade kselftests-kmp-defaultUpgrade kernel-azure-livepatch-develUpgrade cluster-md-kmp-64kbUpgrade kernel-syms-azureUpgrade kernel-docsUpgrade kernel-default-vdsoUpgrade kernel-azure-develUpgrade dtb-xilinx | Dec 5, 2025 | Jun 3, 2025 |
| Ubuntu | — | Upgrade linux-image-6.8.0-1035-nvidia-tegraUpgrade linux-image-nvidia-tegra-rt-6.8No solution existsUpgrade linux-image-nvidia-tegra-6.8Upgrade linux-image-nvidia-tegra-rtUpgrade linux-image-nvidia-tegraUpgrade linux-image-6.8.0-1035-nvidia-tegra-rt | Jun 26, 2025 | Aug 26, 2024 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub