In the Linux kernel, the following vulnerability has been resolved:
idpf: fix checksums set in idpf_rx_rsc()
idpf_rx_rsc() uses skb_transport_offset(skb) while the transport header is not set yet.
This triggers the following warning for CONFIG_DEBUG_NET=y builds.
DEBUG_NET_WARN_ON_ONCE(!skb_transport_header_was_set(skb))
[ 69.261620] WARNING: CPU: 7 PID: 0 at ./include/linux/skbuff.h:3020 idpf_vport_splitq_napi_poll (include/linux/skbuff.h:3020) idpf [ 69.261629] Modules linked in: vfat fat dummy bridge intel_uncore_frequency_tpmi intel_uncore_frequency_common intel_vsec_tpmi idpf intel_vsec cdc_ncm cdc_eem cdc_ether usbnet mii xhci_pci xhci_hcd ehci_pci ehci_hcd libeth [ 69.261644] CPU: 7 UID: 0 PID: 0 Comm: swapper/7 Tainted: G S W 6.14.0-smp-DEV #1697 [ 69.261648] Tainted: [S]=CPU_OUT_OF_SPEC, [W]=WARN [ 69.261650] RIP: 0010:idpf_vport_splitq_napi_poll (include/linux/skbuff.h:3020) idpf [ 69.261677] ? __warn (kernel/panic.c:242 kernel/panic.c:748) [ 69.261682] ? idpf_vport_splitq_napi_poll (include/linux/skbuff.h:3020) idpf [ 69.261687] ? report_bug (lib/bug.c:?) [ 69.261690] ? handle_bug (arch/x86/kernel/traps.c:285) [ 69.261694] ? exc_invalid_op (arch/x86/kernel/traps.c:309) [ 69.261697] ? asm_exc_invalid_op (arch/x86/include/asm/idtentry.h:621) [ 69.261700] ? __pfx_idpf_vport_splitq_napi_poll (drivers/net/ethernet/intel/idpf/idpf_txrx.c:4011) idpf [ 69.261704] ? idpf_vport_splitq_napi_poll (include/linux/skbuff.h:3020) idpf [ 69.261708] ? idpf_vport_splitq_napi_poll (drivers/net/ethernet/intel/idpf/idpf_txrx.c:3072) idpf [ 69.261712] __napi_poll (net/core/dev.c:7194) [ 69.261716] net_rx_action (net/core/dev.c:7265) [ 69.261718] ? __qdisc_run (net/sched/sch_generic.c:293) [ 69.261721] ? sched_clock (arch/x86/include/asm/preempt.h:84 arch/x86/kernel/tsc.c:288) [ 69.261726] handle_softirqs (kernel/softirq.c:561)
CVSS Details
- CVSS 3.1 Base Score: 8.2
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 23, 2026 | Jul 23, 2026 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Mar 27, 2025 |
| Suse | — | Upgrade ocfs2-kmp-defaultUpgrade kernel-rt-vdsoUpgrade dlm-kmp-defaultUpgrade kernel-64kb-extraUpgrade kernel-rt_debug-develUpgrade dtb-allwinnerUpgrade kselftests-kmp-rtUpgrade kernel-source-rtUpgrade kernel-defaultUpgrade reiserfs-kmp-rtUpgrade kernel-debug-vdsoUpgrade dtb-sprdUpgrade kernel-default-baseUpgrade kernel-rt_debugUpgrade cluster-md-kmp-rtUpgrade dtb-rockchipUpgrade kernel-kvmsmall-vdsoUpgrade dtb-socionextUpgrade dtb-renesasUpgrade dtb-caviumUpgrade kernel-develUpgrade reiserfs-kmp-azureUpgrade dtb-armUpgrade kernel-default-optionalUpgrade ocfs2-kmp-azureUpgrade gfs2-kmp-defaultUpgrade kernel-rt-extraUpgrade kselftests-kmp-azureUpgrade dtb-xilinxUpgrade dtb-mediatekUpgrade gfs2-kmp-azureUpgrade kernel-obs-buildUpgrade kernel-default-livepatch-develUpgrade kernel-docsUpgrade kernel-rt-optionalUpgrade reiserfs-kmp-defaultUpgrade dlm-kmp-rtUpgrade kernel-rt-develUpgrade dtb-nvidiaUpgrade kernel-default-base-rebuildUpgrade kernel-azureUpgrade dlm-kmp-azureUpgrade kernel-source-vanillaUpgrade cluster-md-kmp-64kbUpgrade kselftests-kmp-defaultUpgrade dtb-amdUpgrade kernel-default-develUpgrade kernel-symsUpgrade dtb-broadcomUpgrade ocfs2-kmp-64kbUpgrade reiserfs-kmp-64kbUpgrade kernel-debug-develUpgrade kernel-azure-extraUpgrade kernel-azure-develUpgrade ocfs2-kmp-rtUpgrade kernel-rt-livepatch-develUpgrade kernel-rt_debug-vdsoUpgrade kernel-default-vdsoUpgrade kernel-debugUpgrade kernel-64kbUpgrade dtb-qcomUpgrade gfs2-kmp-rtUpgrade dtb-amazonUpgrade kernel-kvmsmall-develUpgrade dtb-marvellUpgrade dtb-appleUpgrade dtb-amlogicUpgrade kernel-syms-rtUpgrade kernel-sourceUpgrade kernel-kvmsmallUpgrade kernel-devel-rtUpgrade kernel-default-extraUpgrade dtb-lgUpgrade dtb-apmUpgrade kselftests-kmp-64kbUpgrade kernel-64kb-develUpgrade kernel-azure-optionalUpgrade kernel-devel-azureUpgrade kernel-rtUpgrade dtb-alteraUpgrade kernel-zfcpdumpUpgrade kernel-docs-htmlUpgrade dlm-kmp-64kbUpgrade cluster-md-kmp-azureUpgrade kernel-64kb-optionalUpgrade dtb-hisiliconUpgrade kernel-azure-vdsoUpgrade kernel-source-azureUpgrade dtb-exynosUpgrade gfs2-kmp-64kbUpgrade dtb-freescaleUpgrade kernel-obs-qaUpgrade kernel-macrosUpgrade kernel-default-livepatchUpgrade cluster-md-kmp-defaultUpgrade kernel-syms-azure | Dec 5, 2025 | Jun 12, 2025 |
| Ubuntu | — | Upgrade linux-image-6.8.0-1036-azure-fdeUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.11.0-1013-raspiUpgrade linux-image-oracleUpgrade linux-image-awsUpgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-oem-22.04Upgrade linux-image-6.8.0-1038-azureUpgrade linux-image-6.8.0-1039-nvidia-64kUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-6.8.0-1039-nvidia-lowlatencyUpgrade linux-image-6.11.0-1014-awsUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-6.8.0-84-lowlatencyUpgrade linux-image-oem-24.04bUpgrade linux-image-6.11.0-26-generic-64kUpgrade linux-image-6.8.0-84-lowlatency-64kUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-6.8.0-1037-oracleUpgrade linux-image-6.8.0-84-genericUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.11.0-1015-azureUpgrade linux-image-virtualUpgrade linux-image-lowlatency-6.8Upgrade linux-image-6.8.1-1034-realtimeUpgrade linux-image-6.11.0-1016-oracle-64kUpgrade linux-image-azure-fde-6.8Upgrade linux-image-realtimeUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-6.11.0-1014-lowlatencyUpgrade linux-image-6.8.0-1036-gke-64kUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-85-generic-64kUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-generic-lpaeUpgrade linux-image-azure-fdeUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.8.0-84-generic-64kUpgrade linux-image-6.11.0-1015-gcpUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-generic-64k-6.8Upgrade linux-image-kvmUpgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-gkeop-6.8Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-gcp-6.8Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-oracle-64kUpgrade linux-image-raspi-realtimeUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-lowlatencyUpgrade linux-image-generic-6.8Upgrade linux-image-gkeopUpgrade linux-image-genericUpgrade linux-image-6.8.0-1038-azure-fdeUpgrade linux-image-azure-nvidiaUpgrade linux-image-6.8.0-1039-nvidiaUpgrade linux-image-6.8.0-1036-azureUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-nvidia-6.8Upgrade linux-image-oem-22.04cUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-6.11.0-1022-oemUpgrade linux-image-6.11.0-1010-realtimeUpgrade linux-image-6.8.0-2031-raspi-realtimeUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-gcp-64kUpgrade linux-image-oem-22.04aUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-generic-64kUpgrade linux-image-gke-64k-6.8Upgrade linux-image-6.8.0-1023-gkeopUpgrade linux-image-6.11.0-1015-gcp-64kUpgrade linux-image-6.8.0-1039-awsUpgrade linux-image-oem-22.04dUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-virtual-6.8Upgrade linux-image-azure-nvidia-lts-24.04Upgrade linux-image-azure-lts-24.04Upgrade linux-image-azure-6.8Upgrade linux-image-ibmUpgrade linux-image-6.8.0-1037-oracle-64kUpgrade linux-image-nvidia-64kUpgrade linux-image-lowlatency-64kUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-gkeUpgrade linux-image-azure-nvidia-6.8Upgrade linux-image-6.8.0-85-genericUpgrade linux-image-aws-lts-24.04Upgrade linux-image-gke-6.8Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-nvidiaUpgrade linux-image-gcpUpgrade linux-image-6.8.0-1039-aws-64kUpgrade linux-image-6.8.0-1039-nvidia-lowlatency-64kUpgrade linux-image-oracle-6.8Upgrade linux-image-oracle-64k-6.8Upgrade linux-image-azureUpgrade linux-image-realtime-6.8.1Upgrade linux-image-6.11.0-26-genericUpgrade linux-image-6.11.0-1016-oracleUpgrade linux-image-aws-64k-6.8Upgrade linux-image-6.8.0-1036-gkeUpgrade linux-image-6.8.0-1040-gcpUpgrade linux-image-ibm-6.8Upgrade linux-image-6.8.0-1039-raspiUpgrade linux-image-ibm-classicUpgrade linux-image-6.8.0-1025-azure-nvidiaUpgrade linux-image-aws-6.8Upgrade linux-image-6.11.0-1015-azure-fdeUpgrade linux-image-aws-64kUpgrade linux-image-gke-64kUpgrade linux-image-raspiUpgrade linux-image-realtime-hwe-22.04Upgrade linux-image-6.8.0-1037-ibmUpgrade linux-image-6.11.0-1014-lowlatency-64kUpgrade linux-image-raspi-6.8Upgrade linux-image-oem-22.04bUpgrade linux-image-6.8.0-1040-gcp-64k | May 21, 2025 | Mar 27, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub