In the Linux kernel, the following vulnerability has been resolved:
idpf: fix idpf_vc_core_init error path
In an event where the platform running the device control plane is rebooted, reset is detected on the driver. It releases all the resources and waits for the reset to complete. Once the reset is done, it tries to build the resources back. At this time if the device control plane is not yet started, then the driver timeouts on the virtchnl message and retries to establish the mailbox again.
In the retry flow, mailbox is deinitialized but the mailbox workqueue is still alive and polling for the mailbox message. This results in accessing the released control queue leading to null-ptr-deref. Fix it by unrolling the work queue cancellation and mailbox deinitialization in the reverse order which they got initialized.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-cross-headersUpgrade kernel-docUpgrade kernel-rt-debug-modules-extraUpgrade kernel-debug-develUpgrade kernelUpgrade kernel-rt-debug-develUpgrade kernel-develUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rt-debugUpgrade kernel-tools-libs-develUpgrade perfUpgrade kernel-rt-modules-extraUpgrade kernel-rt-coreUpgrade kernel-debug-coreUpgrade kernel-debugUpgrade kernel-rt-develUpgrade kernel-zfcpdump-develUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernel-zfcpdump-coreUpgrade kernel-debug-modules-extraUpgrade kernel-zfcpdumpUpgrade kernel-modulesUpgrade kernel-zfcpdump-modulesUpgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade kernel-debug-modulesUpgrade bpftoolUpgrade kernel-rt-modulesUpgrade kernel-rt-debug-modulesUpgrade kernel-modules-extraUpgrade kernel-rtUpgrade kernel-rt-debug-coreUpgrade kernel-headersUpgrade kernel-core | Jul 1, 2025 | Nov 19, 2024 |
| Debian | — | Upgrade linux | Jul 27, 2026 | Jul 27, 2026 |
| Oracle_linux | — | Upgrade kernel | Jun 30, 2025 | Nov 19, 2024 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernelNo solution exists | Jun 26, 2025 | Nov 19, 2024 |
| Rocky_linux | — | Upgrade kernel-debug-develUpgrade kernel-rt-debug-coreUpgrade kernel-rt-coreUpgrade python3-perf-debuginfoUpgrade kernel-cross-headersUpgrade kernel-develUpgrade kernel-rt-modules-extraUpgrade kernel-debugUpgrade kernel-rt-debug-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade kernel-debuginfoUpgrade kernel-tools-libs-develUpgrade kernel-rt-develUpgrade kernelUpgrade bpftoolUpgrade kernel-rt-kvmUpgrade kernel-rt-debug-kvmUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel-debug-modulesUpgrade kernel-rt-debugUpgrade perf-debuginfoUpgrade kernel-modules-extraUpgrade kernel-rt-modulesUpgrade perfUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-rt-debug-modules-extraUpgrade kernel-coreUpgrade kernel-tools-debuginfoUpgrade kernel-debug-debuginfoUpgrade kernel-modulesUpgrade bpftool-debuginfoUpgrade kernel-debug-modules-extraUpgrade kernel-debug-coreUpgrade kernel-rt-debug-develUpgrade kernel-toolsUpgrade kernel-rt-debuginfoUpgrade kernel-rt-debug-modulesUpgrade kernel-rt | Jul 31, 2025 | Jul 29, 2025 |
| Ubuntu | — | Upgrade linux-image-6.11.0-18-genericUpgrade linux-image-5.15.0-1076-gkeUpgrade linux-image-gcp-64kUpgrade linux-image-6.11.0-1010-lowlatencyUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-6.11.0-1015-oemUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-realtimeUpgrade linux-image-azure-fdeUpgrade linux-image-gcpUpgrade linux-image-6.8.0-1024-gcp-64kUpgrade linux-image-azureUpgrade linux-image-6.11.0-1010-lowlatency-64kUpgrade linux-image-awsUpgrade linux-image-6.11.0-1011-oracleUpgrade linux-image-oem-24.04aUpgrade linux-image-6.8.0-1007-gkeopUpgrade linux-image-6.8.0-1019-gkeUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-realtime-hwe-24.04Upgrade linux-image-6.11.0-1009-awsUpgrade linux-image-oracle-64kUpgrade linux-image-5.15.0-1078-gcpUpgrade linux-image-6.8.0-1024-gcpUpgrade linux-image-raspiUpgrade linux-image-lowlatencyUpgrade linux-image-gke-5.15Upgrade linux-image-oem-24.04Upgrade linux-image-6.8.0-1025-gcp-64kUpgrade linux-image-6.11.0-1009-gcpUpgrade linux-image-6.8.0-1020-gkeUpgrade linux-image-6.11.0-1009-azureUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-oracleUpgrade linux-image-gkeop-6.8Upgrade linux-image-6.11.0-1005-realtimeUpgrade linux-image-generic-64kUpgrade linux-image-6.8.0-1006-gkeopUpgrade linux-image-gkeopUpgrade linux-image-virtualUpgrade linux-image-6.11.0-1008-raspiUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-genericUpgrade linux-image-6.11.0-1009-azure-fdeUpgrade linux-image-gkeUpgrade linux-image-6.11.0-1011-oracle-64kUpgrade linux-image-6.8.0-1025-gcpUpgrade linux-image-6.11.0-18-generic-64kUpgrade linux-image-oem-24.04bUpgrade linux-image-lowlatency-64kUpgrade linux-image-gcp-lts-22.04 | Feb 20, 2025 | Nov 19, 2024 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub