In the Linux kernel, the following vulnerability has been resolved:
bnxt_en: Fix double DMA unmapping for XDP_REDIRECT
Remove the dma_unmap_page_attrs() call in the driver's XDP_REDIRECT code path. This should have been removed when we let the page pool handle the DMA mapping. This bug causes the warning:
WARNING: CPU: 7 PID: 59 at drivers/iommu/dma-iommu.c:1198 iommu_dma_unmap_page+0xd5/0x100 CPU: 7 PID: 59 Comm: ksoftirqd/7 Tainted: G W 6.8.0-1010-gcp #11-Ubuntu Hardware name: Dell Inc. PowerEdge R7525/0PYVT1, BIOS 2.15.2 04/02/2024 RIP: 0010:iommu_dma_unmap_page+0xd5/0x100 Code: 89 ee 48 89 df e8 cb f2 69 ff 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d 31 c0 31 d2 31 c9 31 f6 31 ff 45 31 c0 e9 ab 17 71 00 <0f> 0b 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d 31 c0 31 d2 31 c9 RSP: 0018:ffffab1fc0597a48 EFLAGS: 00010246 RAX: 0000000000000000 RBX: ffff99ff838280c8 RCX: 0000000000000000 RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 RBP: ffffab1fc0597a78 R08: 0000000000000002 R09: ffffab1fc0597c1c R10: ffffab1fc0597cd3 R11: ffff99ffe375acd8 R12: 00000000e65b9000 R13: 0000000000000050 R14: 0000000000001000 R15: 0000000000000002 FS: 0000000000000000(0000) GS:ffff9a06efb80000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000565c34c37210 CR3: 00000005c7e3e000 CR4: 0000000000350ef0 ? show_regs+0x6d/0x80 ? __warn+0x89/0x150 ? iommu_dma_unmap_page+0xd5/0x100 ? report_bug+0x16a/0x190 ? handle_bug+0x51/0xa0 ? exc_invalid_op+0x18/0x80 ? iommu_dma_unmap_page+0xd5/0x100 ? iommu_dma_unmap_page+0x35/0x100 dma_unmap_page_attrs+0x55/0x220 ? bpf_prog_4d7e87c0d30db711_xdp_dispatcher+0x64/0x9f bnxt_rx_xdp+0x237/0x520 [bnxt_en] bnxt_rx_pkt+0x640/0xdd0 [bnxt_en] __bnxt_poll_work+0x1a1/0x3d0 [bnxt_en] bnxt_poll+0xaa/0x1e0 [bnxt_en] __napi_poll+0x33/0x1e0 net_rx_action+0x18a/0x2f0
CVSS Details
- CVSS 3.1 Base Score: 10
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 27, 2026 | Jul 27, 2026 |
| Oracle_linux | — | Upgrade kernel-uek | Apr 15, 2025 | Sep 4, 2024 |
| Redhat_linux | — | Upgrade kernel-rtNo solution existsUpgrade kernel | Dec 5, 2024 | Sep 4, 2024 |
| Suse | — | Upgrade kernel-sourceUpgrade kernel-syms-azureUpgrade dtb-xilinxUpgrade kernel-default-vdsoUpgrade kernel-kvmsmallUpgrade gfs2-kmp-64kbUpgrade kernel-azure-livepatch-develUpgrade kernel-default-livepatchUpgrade gfs2-kmp-defaultUpgrade kernel-source-azureUpgrade ocfs2-kmp-defaultUpgrade kernel-azureUpgrade kernel-debug-vdsoUpgrade kernel-64kb-livepatch-develUpgrade cluster-md-kmp-rtUpgrade kernel-azure-optionalUpgrade kernel-default-develUpgrade kernel-rtUpgrade kernel-kvmsmall-livepatch-develUpgrade reiserfs-kmp-64kbUpgrade dtb-allwinnerUpgrade kernel-source-rtUpgrade dtb-amazonUpgrade kernel-zfcpdumpUpgrade kselftests-kmp-64kbUpgrade dtb-caviumUpgrade ocfs2-kmp-rtUpgrade dtb-broadcomUpgrade ocfs2-kmp-azureUpgrade dtb-exynosUpgrade kernel-devel-azureUpgrade kernel-rt-optionalUpgrade ocfs2-kmp-64kbUpgrade dtb-lgUpgrade gfs2-kmp-rtUpgrade kernel-64kb-develUpgrade gfs2-kmp-azureUpgrade kernel-develUpgrade dtb-freescaleUpgrade kernel-rt-vdsoUpgrade kernel-rt_debug-develUpgrade kernel-default-base-rebuildUpgrade kselftests-kmp-azureUpgrade kernel-kvmsmall-develUpgrade dtb-qcomUpgrade dtb-alteraUpgrade kernel-azure-develUpgrade kernel-devel-rtUpgrade cluster-md-kmp-azureUpgrade kernel-64kb-optionalUpgrade kernel-rt-develUpgrade kernel-source-vanillaUpgrade kernel-default-optionalUpgrade dlm-kmp-64kbUpgrade kernel-64kbUpgrade dtb-amdUpgrade kernel-kvmsmall-vdsoUpgrade kernel-default-baseUpgrade dtb-appleUpgrade dlm-kmp-azureUpgrade dtb-apmUpgrade kernel-rt_debugUpgrade kernel-debugUpgrade kernel-rt-extraUpgrade dtb-mediatekUpgrade kernel-azure-extraUpgrade kernel-debug-livepatch-develUpgrade dlm-kmp-defaultUpgrade kselftests-kmp-rtUpgrade dtb-hisiliconUpgrade kernel-macrosUpgrade dtb-socionextUpgrade dtb-renesasUpgrade kernel-syms-rtUpgrade kernel-default-extraUpgrade reiserfs-kmp-defaultUpgrade cluster-md-kmp-defaultUpgrade reiserfs-kmp-azureUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-default-livepatch-develUpgrade kernel-obs-qaUpgrade dlm-kmp-rtUpgrade kernel-rt_debug-vdsoUpgrade kernel-docsUpgrade dtb-armUpgrade kselftests-kmp-defaultUpgrade kernel-rt-livepatch-develUpgrade kernel-obs-buildUpgrade kernel-defaultUpgrade kernel-azure-vdsoUpgrade dtb-rockchipUpgrade dtb-nvidiaUpgrade dtb-amlogicUpgrade reiserfs-kmp-rtUpgrade kernel-docs-htmlUpgrade dtb-sprdUpgrade cluster-md-kmp-64kbUpgrade kernel-symsUpgrade kernel-debug-develUpgrade kernel-64kb-extraUpgrade dtb-marvell | Dec 5, 2025 | Oct 8, 2024 |
| Ubuntu | — | Upgrade linux-image-gkeopUpgrade linux-image-gkeop-6.8Upgrade linux-image-oracleUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-6.8.0-1017-ibmUpgrade linux-image-gcpUpgrade linux-image-kvmUpgrade linux-image-oem-24.04Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-oem-22.04aUpgrade linux-image-oem-24.04aUpgrade linux-image-oracle-64kUpgrade linux-image-6.8.0-1020-azureUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-generic-64kUpgrade linux-image-genericUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-lowlatencyUpgrade linux-image-oem-22.04bUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-virtualUpgrade linux-image-6.8.0-1019-gcpUpgrade linux-image-6.8.0-1002-gkeopUpgrade linux-image-oem-22.04cUpgrade linux-image-nvidia-64kUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-ibmUpgrade linux-image-ibm-classicUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-gkeUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-6.8.0-1019-nvidiaUpgrade linux-image-6.8.0-1019-nvidia-lowlatencyUpgrade linux-image-6.8.0-1020-awsUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-nvidia-6.8Upgrade linux-image-generic-lpaeUpgrade linux-image-6.8.0-1019-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-50-genericUpgrade linux-image-oem-22.04dUpgrade linux-image-awsUpgrade linux-image-6.8.0-1018-oemUpgrade linux-image-6.8.0-1019-nvidia-64kUpgrade linux-image-6.8.0-1017-oracleUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-6.8.0-50-lowlatency-64kUpgrade linux-image-6.8.0-50-lowlatencyUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-6.8.0-50-generic-64kUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-azureUpgrade linux-image-lowlatency-64kUpgrade linux-image-oem-22.04Upgrade linux-image-nvidiaUpgrade linux-image-6.8.0-1020-azure-fdeUpgrade linux-image-raspiUpgrade linux-image-6.8.0-1015-gkeUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.8.0-1017-oracle-64kUpgrade linux-image-azure-fdeUpgrade linux-image-6.8.0-1016-raspiUpgrade linux-image-generic-64k-hwe-24.04 | Dec 13, 2024 | Sep 4, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub