The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
In the Linux kernel, the following vulnerability has been resolved:
eth: bnxt: do not update checksum in bnxt_xdp_build_skb()
The bnxt_rx_pkt() updates ip_summed value at the end if checksum offload is enabled. When the XDP-MB program is attached and it returns XDP_PASS, the bnxt_xdp_build_skb() is called to update skb_shared_info. The main purpose of bnxt_xdp_build_skb() is to update skb_shared_info, but it updates ip_summed value too if checksum offload is enabled. This is actually duplicate work.
When the bnxt_rx_pkt() updates ip_summed value, it checks if ip_summed is CHECKSUM_NONE or not. It means that ip_summed should be CHECKSUM_NONE at this moment. But ip_summed may already be updated to CHECKSUM_UNNECESSARY in the XDP-MB-PASS path. So the by skb_checksum_none_assert() WARNS about it.
This is duplicate work and updating ip_summed in the bnxt_xdp_build_skb() is not needed.
Splat looks like: WARNING: CPU: 3 PID: 5782 at ./include/linux/skbuff.h:5155 bnxt_rx_pkt+0x479b/0x7610 [bnxt_en] Modules linked in: bnxt_re bnxt_en rdma_ucm rdma_cm iw_cm ib_cm ib_uverbs veth xt_nat xt_tcpudp xt_conntrack nft_chain_nat xt_MASQUERADE nf_] CPU: 3 UID: 0 PID: 5782 Comm: socat Tainted: G W 6.14.0-rc4+ #27 Tainted: [W]=WARN Hardware name: ASUS System Product Name/PRIME Z690-P D4, BIOS 0603 11/01/2021 RIP: 0010:bnxt_rx_pkt+0x479b/0x7610 [bnxt_en] Code: 54 24 0c 4c 89 f1 4c 89 ff c1 ea 1f ff d3 0f 1f 00 49 89 c6 48 85 c0 0f 84 4c e5 ff ff 48 89 c7 e8 ca 3d a0 c8 e9 8f f4 ff ff <0f> 0b f RSP: 0018:ffff88881ba09928 EFLAGS: 00010202 RAX: 0000000000000000 RBX: 00000000c7590303 RCX: 0000000000000000 RDX: 1ffff1104e7d1610 RSI: 0000000000000001 RDI: ffff8881c91300b8 RBP: ffff88881ba09b28 R08: ffff888273e8b0d0 R09: ffff888273e8b070 R10: ffff888273e8b010 R11: ffff888278b0f000 R12: ffff888273e8b080 R13: ffff8881c9130e00 R14: ffff8881505d3800 R15: ffff888273e8b000 FS: 00007f5a2e7be080(0000) GS:ffff88881ba00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007fff2e708ff8 CR3: 000000013e3b0000 CR4: 00000000007506f0 PKRU: 55555554 Call Trace: <IRQ> ? __warn+0xcd/0x2f0 ? bnxt_rx_pkt+0x479b/0x7610 ? report_bug+0x326/0x3c0 ? handle_bug+0x53/0xa0 ? exc_invalid_op+0x14/0x50 ? asm_exc_invalid_op+0x16/0x20 ? bnxt_rx_pkt+0x479b/0x7610 ? bnxt_rx_pkt+0x3e41/0x7610 ? __pfx_bnxt_rx_pkt+0x10/0x10 ? napi_complete_done+0x2cf/0x7d0 __bnxt_poll_work+0x4e8/0x1220 ? __pfx___bnxt_poll_work+0x10/0x10 ? __pfx_mark_lock.part.0+0x10/0x10 bnxt_poll_p5+0x36a/0xfa0 ? __pfx_bnxt_poll_p5+0x10/0x10 __napi_poll.constprop.0+0xa0/0x440 net_rx_action+0x899/0xd00 ...
Following ping.py patch adds xdp-mb-pass case. so ping.py is going to be able to reproduce this issue.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux-6.1Upgrade linux | Apr 14, 2025 | Apr 1, 2025 |
| Suse | — | Upgrade kselftests-kmp-azureUpgrade dtb-renesasUpgrade kernel-rt-optionalUpgrade kernel-syms-rtUpgrade ocfs2-kmp-azureUpgrade dtb-amdUpgrade kernel-rt_debug-vdsoUpgrade kernel-default-livepatch-develUpgrade kernel-default-livepatchUpgrade kernel-obs-qaUpgrade dtb-hisiliconUpgrade kernel-rt_debugUpgrade dlm-kmp-rtUpgrade kselftests-kmp-defaultUpgrade kernel-debug-develUpgrade kernel-defaultUpgrade cluster-md-kmp-64kbUpgrade ocfs2-kmp-64kbUpgrade dtb-freescaleUpgrade kernel-azure-vdsoUpgrade dtb-apmUpgrade cluster-md-kmp-defaultUpgrade kernel-docs-htmlUpgrade dtb-amlogicUpgrade dlm-kmp-defaultUpgrade dlm-kmp-azureUpgrade kernel-64kbUpgrade kernel-kvmsmall-vdsoUpgrade reiserfs-kmp-rtUpgrade dtb-sprdUpgrade reiserfs-kmp-64kbUpgrade dtb-appleUpgrade dtb-broadcomUpgrade kselftests-kmp-rtUpgrade dtb-socionextUpgrade kernel-docsUpgrade kernel-64kb-extraUpgrade kernel-default-extraUpgrade kernel-macrosUpgrade kernel-default-baseUpgrade gfs2-kmp-64kbUpgrade dtb-marvellUpgrade gfs2-kmp-defaultUpgrade kernel-azure-extraUpgrade kernel-default-develUpgrade kernel-rt-vdsoUpgrade kernel-symsUpgrade reiserfs-kmp-defaultUpgrade dtb-amazonUpgrade kernel-rt-livepatch-develUpgrade kernel-64kb-optionalUpgrade kernel-debugUpgrade kernel-source-rtUpgrade cluster-md-kmp-azureUpgrade kernel-rt-extraUpgrade kernel-rtUpgrade dtb-mediatekUpgrade dtb-lgUpgrade dtb-armUpgrade ocfs2-kmp-rtUpgrade gfs2-kmp-rtUpgrade kernel-develUpgrade kernel-azureUpgrade kernel-rt-develUpgrade dtb-caviumUpgrade ocfs2-kmp-defaultUpgrade kernel-devel-azureUpgrade kernel-64kb-develUpgrade kernel-zfcpdumpUpgrade kernel-source-vanillaUpgrade gfs2-kmp-azureUpgrade kernel-azure-develUpgrade reiserfs-kmp-azureUpgrade kernel-kvmsmallUpgrade kernel-default-optionalUpgrade dlm-kmp-64kbUpgrade kernel-obs-buildUpgrade dtb-nvidiaUpgrade kernel-rt_debug-develUpgrade kernel-devel-rtUpgrade kernel-debug-vdsoUpgrade dtb-xilinxUpgrade kernel-default-vdsoUpgrade dtb-rockchipUpgrade dtb-exynosUpgrade dtb-alteraUpgrade kernel-source-azureUpgrade kernel-sourceUpgrade kernel-kvmsmall-develUpgrade kernel-default-base-rebuildUpgrade cluster-md-kmp-rtUpgrade kselftests-kmp-64kbUpgrade kernel-syms-azureUpgrade kernel-azure-optionalUpgrade dtb-qcomUpgrade dtb-allwinner | Dec 5, 2025 | May 21, 2025 |
| Ubuntu | — | Upgrade linux-image-6.8.0-1039-nvidia-64kUpgrade linux-image-6.8.0-1040-gcp-64kUpgrade linux-image-azureUpgrade linux-image-genericUpgrade linux-image-6.11.0-1015-lowlatencyUpgrade linux-image-6.11.0-1016-gcpUpgrade linux-image-gkeUpgrade linux-image-raspi-6.8Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.8.0-85-generic-64kUpgrade linux-image-nvidia-6.8Upgrade linux-image-gke-64k-6.8Upgrade linux-image-6.11.0-1014-raspiUpgrade linux-image-6.11.0-1017-oracleUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-gkeopUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-raspiUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-aws-lts-24.04Upgrade linux-image-gke-6.8Upgrade linux-image-gke-64kUpgrade linux-image-gcp-64kUpgrade linux-image-realtimeUpgrade linux-image-azure-nvidia-lts-24.04Upgrade linux-image-azure-fde-6.8Upgrade linux-image-virtual-6.8Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-awsUpgrade linux-image-aws-6.8Upgrade linux-image-oracle-6.8Upgrade linux-image-realtime-6.8.1Upgrade linux-image-lowlatency-64k-6.11Upgrade linux-image-6.8.0-1038-azure-fdeUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-6.8.0-1039-aws-64kUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-lowlatency-6.8Upgrade linux-image-oem-22.04cUpgrade linux-image-6.8.0-1037-oracle-64kUpgrade linux-image-6.11.0-1015-awsUpgrade linux-image-6.8.0-1036-azure-fdeUpgrade linux-image-6.8.0-1036-gkeUpgrade linux-image-6.8.0-84-lowlatencyUpgrade linux-image-oem-22.04dUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-6.8.0-2031-raspi-realtimeUpgrade linux-image-6.8.0-1036-gke-64kUpgrade linux-image-6.11.0-1024-oemUpgrade linux-image-6.8.0-1023-gkeopUpgrade linux-image-6.11.0-28-generic-64kUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-6.8.0-84-genericUpgrade linux-image-6.8.0-1039-nvidia-lowlatency-64kUpgrade linux-image-realtime-hwe-22.04Upgrade linux-image-oracleUpgrade linux-image-gcpUpgrade linux-image-azure-6.11Upgrade linux-image-generic-6.8Upgrade linux-image-6.8.1-1034-realtimeUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-raspi-realtimeUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-azure-6.8Upgrade linux-image-azure-lts-24.04Upgrade linux-image-6.8.0-1025-azure-nvidiaUpgrade linux-image-oem-22.04Upgrade linux-image-ibmUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-6.11.0-1018-azureUpgrade linux-image-oem-22.04aUpgrade linux-image-nvidiaUpgrade linux-image-azure-fde-6.11Upgrade linux-image-generic-lpaeUpgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-6.11.0-1017-oracle-64kUpgrade linux-image-6.11.0-1015-lowlatency-64kUpgrade linux-image-gkeop-6.8Upgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-azure-nvidiaUpgrade linux-image-oem-22.04bUpgrade linux-image-kvmUpgrade linux-image-nvidia-64kUpgrade linux-image-6.11.0-1011-realtimeUpgrade linux-image-6.8.0-1037-ibmUpgrade linux-image-6.8.0-1037-oracleUpgrade linux-image-lowlatencyUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-6.11.0-1016-gcp-64kUpgrade linux-image-lowlatency-6.11Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-oracle-64kUpgrade linux-image-virtualUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-6.8.0-1038-azureUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-ibm-6.8Upgrade linux-image-azure-nvidia-6.8Upgrade linux-image-6.8.0-1039-awsUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-gcp-6.8Upgrade linux-image-aws-64k-6.8Upgrade linux-image-6.8.0-1039-nvidiaUpgrade linux-image-6.8.0-1040-gcpUpgrade linux-image-generic-64k-6.8Upgrade linux-image-azure-fdeUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-6.8.0-1039-nvidia-lowlatencyUpgrade linux-image-ibm-classicUpgrade linux-image-6.8.0-1039-raspiUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.8.0-1036-azureUpgrade linux-image-6.8.0-85-genericUpgrade linux-image-azure-fde-edgeUpgrade linux-image-6.8.0-84-lowlatency-64kUpgrade linux-image-oem-24.04bUpgrade linux-image-6.11.0-1018-azure-fdeUpgrade linux-image-generic-64kUpgrade linux-image-6.8.0-84-generic-64kUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.11.0-28-genericUpgrade linux-image-aws-64k | Jun 26, 2025 | Apr 1, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 13, 2025 | Apr 1, 2025 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub