In the Linux kernel, the following vulnerability has been resolved:
net/mlx5e: SHAMPO, Fix incorrect page release
Under the following conditions: 1) No skb created yet 2) header_size == 0 (no SHAMPO header) 3) header_index + 1 % MLX5E_SHAMPO_WQ_HEADER_PER_PAGE == 0 (this is the last page fragment of a SHAMPO header page)
a new skb is formed with a page that is NOT a SHAMPO header page (it is a regular data page). Further down in the same function (mlx5e_handle_rx_cqe_mpwrq_shampo()), a SHAMPO header page from header_index is released. This is wrong and it leads to SHAMPO header pages being released more than once.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade kernel-livepatch-6.1.109-118.189Upgrade kernel-tools-debuginfoUpgrade kernel-develUpgrade perf-debuginfoUpgrade kernel-libbpfUpgrade kernel-modules-extraUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-toolsUpgrade perfUpgrade bpftool-debuginfoUpgrade kernel-tools-develUpgrade kernel-libbpf-staticUpgrade python3-perfUpgrade kernel-headersUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfoUpgrade kernel-modules-extra-commonUpgrade kernel-libbpf-develUpgrade python3-perf-debuginfoUpgrade bpftool | Mar 27, 2025 | Sep 18, 2024 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Oct 7, 2024 | Sep 18, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Sep 18, 2024 |
| Suse | — | Upgrade kernel-64kbUpgrade dtb-apmUpgrade dlm-kmp-64kbUpgrade dtb-mediatekUpgrade dtb-alteraUpgrade dtb-xilinxUpgrade kernel-azure-optionalUpgrade kernel-default-vdsoUpgrade gfs2-kmp-azureUpgrade ocfs2-kmp-defaultUpgrade kernel-rt-livepatchUpgrade reiserfs-kmp-defaultUpgrade kernel-default-baseUpgrade kernel-default-optionalUpgrade kernel-default-livepatch-develUpgrade kernel-64kb-livepatch-develUpgrade kernel-develUpgrade kernel-default-develUpgrade dtb-armUpgrade kernel-64kb-optionalUpgrade kernel-rt_debug-livepatch-develUpgrade dtb-hisiliconUpgrade cluster-md-kmp-rtUpgrade dtb-renesasUpgrade kernel-64kb-develUpgrade dtb-allwinnerUpgrade kernel-debug-develUpgrade kselftests-kmp-64kbUpgrade dtb-amazonUpgrade kernel-devel-rtUpgrade ocfs2-kmp-rtUpgrade dtb-amdUpgrade reiserfs-kmp-azureUpgrade kernel-debugUpgrade kernel-rt-develUpgrade ocfs2-kmp-azureUpgrade cluster-md-kmp-azureUpgrade kernel-kvmsmall-develUpgrade gfs2-kmp-defaultUpgrade dtb-caviumUpgrade gfs2-kmp-64kbUpgrade kernel-zfcpdumpUpgrade kernel-symsUpgrade kernel-64kb-extraUpgrade dtb-exynosUpgrade cluster-md-kmp-defaultUpgrade kselftests-kmp-azureUpgrade dtb-lgUpgrade kernel-sourceUpgrade kernel-rt_debugUpgrade kernel-rt-optionalUpgrade kernel-rt-livepatch-develUpgrade kernel-debug-livepatch-develUpgrade gfs2-kmp-rtUpgrade dlm-kmp-rtUpgrade kselftests-kmp-defaultUpgrade cluster-md-kmp-64kbUpgrade kselftests-kmp-rtUpgrade kernel-syms-rtUpgrade kernel-rt_debug-develUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-default-base-rebuildUpgrade kernel-macrosUpgrade dtb-broadcomUpgrade kernel-rt-extraUpgrade kernel-azure-extraUpgrade kernel-source-vanillaUpgrade dtb-appleUpgrade kernel-default-livepatchUpgrade dtb-freescaleUpgrade kernel-rt-vdsoUpgrade kernel-default-extraUpgrade dtb-marvellUpgrade kernel-obs-qaUpgrade kernel-devel-azureUpgrade dtb-sprdUpgrade ocfs2-kmp-64kbUpgrade kernel-azure-develUpgrade kernel-syms-azureUpgrade kernel-kvmsmallUpgrade dtb-socionextUpgrade kernel-defaultUpgrade dlm-kmp-defaultUpgrade kernel-rtUpgrade kernel-kvmsmall-vdsoUpgrade dtb-qcomUpgrade dlm-kmp-azureUpgrade reiserfs-kmp-rtUpgrade kernel-azure-vdsoUpgrade dtb-nvidiaUpgrade dtb-amlogicUpgrade kernel-source-azureUpgrade kernel-rt_debug-vdsoUpgrade kernel-obs-buildUpgrade kernel-docs-htmlUpgrade kernel-docsUpgrade reiserfs-kmp-64kbUpgrade kernel-debug-vdsoUpgrade kernel-azure-livepatch-develUpgrade kernel-azureUpgrade dtb-rockchipUpgrade kernel-source-rt | Dec 5, 2025 | Oct 8, 2024 |
| Ubuntu | — | Upgrade linux-image-6.8.0-50-generic-64kUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-genericUpgrade linux-image-6.8.0-1018-oemUpgrade linux-image-6.8.0-1002-gkeopUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-oem-24.04aUpgrade linux-image-azureUpgrade linux-image-ibmUpgrade linux-image-6.8.0-1019-nvidia-lowlatency-64kUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-6.8.0-1017-ibmUpgrade linux-image-raspiUpgrade linux-image-lowlatency-64kUpgrade linux-image-oracle-64kUpgrade linux-image-generic-lpaeUpgrade linux-image-generic-64kUpgrade linux-image-gkeopUpgrade linux-image-gkeop-6.8Upgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-oem-22.04Upgrade linux-image-6.8.0-1015-gkeUpgrade linux-image-oem-22.04cUpgrade linux-image-oem-22.04aUpgrade linux-image-6.8.0-1017-oracle-64kUpgrade linux-image-6.8.0-1019-nvidiaUpgrade linux-image-gkeUpgrade linux-image-oem-24.04Upgrade linux-image-6.8.0-50-lowlatency-64kUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-lowlatencyUpgrade linux-image-6.8.0-1019-nvidia-lowlatencyUpgrade linux-image-nvidiaUpgrade linux-image-6.8.0-1019-nvidia-64kUpgrade linux-image-nvidia-64kUpgrade linux-image-6.8.0-1020-azureUpgrade linux-image-gcpUpgrade linux-image-6.8.0-1016-raspiUpgrade linux-image-ibm-classicUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-nvidia-6.8Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-oracleUpgrade linux-image-awsUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-virtualUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.8.0-50-lowlatencyUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-6.8.0-1019-gcpUpgrade linux-image-azure-fdeUpgrade linux-image-6.8.0-50-genericUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-6.8.0-1020-awsUpgrade linux-image-oem-22.04dUpgrade linux-image-kvmUpgrade linux-image-6.8.0-1020-azure-fdeUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-6.8.0-1017-oracleUpgrade linux-image-oem-22.04b | Dec 13, 2024 | Sep 18, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 13, 2025 | Sep 18, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub