In the Linux kernel, the following vulnerability has been resolved:
net: decrease cached dst counters in dst_release
Upstream fix ac888d58869b ("net: do not delay dst_entries_add() in dst_release()") moved decrementing the dst count from dst_destroy to dst_release to avoid accessing already freed data in case of netns dismantle. However in case CONFIG_DST_CACHE is enabled and OvS+tunnels are used, this fix is incomplete as the same issue will be seen for cached dsts:
Unable to handle kernel paging request at virtual address ffff5aabf6b5c000 Call trace: percpu_counter_add_batch+0x3c/0x160 (P) dst_release+0xec/0x108 dst_cache_destroy+0x68/0xd8 dst_destroy+0x13c/0x168 dst_destroy_rcu+0x1c/0xb0 rcu_do_batch+0x18c/0x7d0 rcu_core+0x174/0x378 rcu_core_si+0x18/0x30
Fix this by invalidating the cache, and thus decrementing cached dst counters, in dst_release too.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade kernel-libbpf-debuginfoUpgrade perf6.12Upgrade kernel-modules-extra-commonUpgrade kernel6.12Upgrade kernel-livepatch-6.12.23-29.97Upgrade bpftool-debuginfoUpgrade kernel-toolsUpgrade bpftoolUpgrade kernel-tools-develUpgrade kernel-libbpf-develUpgrade perf6.12-debuginfoUpgrade kernel-libbpf-staticUpgrade kernel6.12-debuginfo-common-x86_64Upgrade kernel6.12-debuginfo-common-aarch64Upgrade python3-perf6.12Upgrade kernel6.12-debuginfoUpgrade kernel-develUpgrade kernel6.12-modules-extraUpgrade python3-perf6.12-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-headersUpgrade kernel-libbpf | Jun 24, 2025 | Apr 16, 2025 |
| Debian | — | Upgrade linux | May 15, 2025 | Apr 16, 2025 |
| Huawei Euleros 2_0_sp11 | — | Upgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade bpftool | Oct 14, 2025 | Oct 10, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-tools-libsUpgrade kernelUpgrade python3-perfUpgrade bpftoolUpgrade kernel-abi-stablelistsUpgrade kernel-tools | Nov 12, 2025 | Oct 10, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade kernelUpgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade python3-perfUpgrade bpftool | Oct 24, 2025 | Oct 10, 2025 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Apr 16, 2025 |
| Suse | — | Upgrade kernel-kvmsmallUpgrade dtb-caviumUpgrade kernel-azure-extraUpgrade kernel-debug-develUpgrade kernel-64kb-optionalUpgrade ocfs2-kmp-64kbUpgrade kernel-64kb-develUpgrade dtb-apmUpgrade dtb-hisiliconUpgrade kernel-devel-azureUpgrade kernel-kvmsmall-develUpgrade kernel-default-vdsoUpgrade dtb-amlogicUpgrade kernel-rt-optionalUpgrade kernel-sourceUpgrade kselftests-kmp-64kbUpgrade kernel-default-develUpgrade dtb-amdUpgrade dtb-alteraUpgrade kernel-macrosUpgrade kernel-source-azureUpgrade kernel-obs-qaUpgrade kernel-symsUpgrade kernel-default-extraUpgrade kernel-docs-htmlUpgrade kernel-default-livepatchUpgrade kernel-syms-azureUpgrade gfs2-kmp-64kbUpgrade kernel-64kbUpgrade reiserfs-kmp-defaultUpgrade dtb-marvellUpgrade dlm-kmp-64kbUpgrade dtb-lgUpgrade gfs2-kmp-azureUpgrade kernel-zfcpdumpUpgrade reiserfs-kmp-64kbUpgrade cluster-md-kmp-azureUpgrade kernel-debugUpgrade ocfs2-kmp-rtUpgrade gfs2-kmp-rtUpgrade kernel-kvmsmall-vdsoUpgrade dtb-appleUpgrade kernel-rt_debug-develUpgrade dtb-amazonUpgrade kernel-source-rtUpgrade kselftests-kmp-azureUpgrade dtb-broadcomUpgrade dtb-exynosUpgrade dtb-freescaleUpgrade kernel-azure-optionalUpgrade kernel-rt_debugUpgrade kernel-source-vanillaUpgrade kernel-azure-develUpgrade dlm-kmp-azureUpgrade kernel-docsUpgrade dtb-armUpgrade kernel-azureUpgrade dtb-mediatekUpgrade reiserfs-kmp-azureUpgrade reiserfs-kmp-rtUpgrade kernel-azure-vdsoUpgrade ocfs2-kmp-defaultUpgrade kernel-syms-rtUpgrade dtb-qcomUpgrade kselftests-kmp-defaultUpgrade dtb-renesasUpgrade kernel-rtUpgrade dtb-nvidiaUpgrade kernel-develUpgrade kernel-default-optionalUpgrade dlm-kmp-rtUpgrade kernel-rt-develUpgrade kernel-devel-rtUpgrade dtb-allwinnerUpgrade ocfs2-kmp-azureUpgrade kernel-rt-vdsoUpgrade dlm-kmp-defaultUpgrade kselftests-kmp-rtUpgrade kernel-rt-livepatch-develUpgrade kernel-obs-buildUpgrade dtb-sprdUpgrade cluster-md-kmp-64kbUpgrade kernel-debug-vdsoUpgrade kernel-default-livepatch-develUpgrade kernel-default-base-rebuildUpgrade cluster-md-kmp-defaultUpgrade kernel-defaultUpgrade kernel-default-baseUpgrade dtb-rockchipUpgrade cluster-md-kmp-rtUpgrade kernel-rt_debug-vdsoUpgrade kernel-64kb-extraUpgrade gfs2-kmp-defaultUpgrade kernel-rt-extraUpgrade dtb-xilinxUpgrade dtb-socionext | Dec 5, 2025 | Jun 12, 2025 |
| Ubuntu | — | Upgrade linux-image-6.11.0-1011-realtimeUpgrade linux-image-6.8.0-1038-gke-64kUpgrade linux-image-virtualUpgrade linux-image-6.14.0-1007-oracleUpgrade linux-image-6.8.0-86-lowlatency-64kUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-gkeop-6.8Upgrade linux-image-6.11.0-1017-oracleUpgrade linux-image-azure-fdeUpgrade linux-image-6.14.0-22-genericUpgrade linux-image-6.8.0-1041-nvidia-64kUpgrade linux-image-6.8.0-1042-gcpUpgrade linux-image-6.14.0-1004-realtimeUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-6.8.0-86-generic-64kUpgrade linux-image-6.11.0-1017-oracle-64kUpgrade linux-image-lowlatency-64kUpgrade linux-image-realtimeUpgrade linux-image-lowlatencyUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-6.14.0-1007-oracle-64kUpgrade linux-image-6.11.0-28-genericUpgrade linux-image-6.11.0-28-generic-64kUpgrade linux-image-lowlatency-6.11Upgrade linux-image-awsUpgrade linux-image-6.14.0-22-generic-64kUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-oracleUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-6.11.0-1015-awsUpgrade linux-image-6.11.0-1015-lowlatencyUpgrade linux-image-nvidia-6.8Upgrade linux-image-azure-6.11Upgrade linux-image-azure-fipsUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-gcp-6.8Upgrade linux-image-ibm-classicUpgrade linux-image-6.8.0-86-lowlatencyUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-gke-64kUpgrade linux-image-lowlatency-6.8Upgrade linux-image-oem-22.04Upgrade linux-image-6.8.0-1044-azure-fipsUpgrade linux-image-generic-lpaeUpgrade linux-image-azure-fde-6.11Upgrade linux-image-6.11.0-1015-lowlatency-64kUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.8.0-1038-oracleUpgrade linux-image-oem-24.04bUpgrade linux-image-6.8.0-1041-nvidiaUpgrade linux-image-generic-64k-6.8Upgrade linux-image-6.14.0-1007-raspiUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-6.8.0-1041-aws-64kUpgrade linux-image-6.14.0-1008-gcp-64kUpgrade linux-image-6.14.0-1007-awsUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-aws-6.8Upgrade linux-image-raspi-6.8Upgrade linux-image-oracle-64k-6.8Upgrade linux-image-nvidia-64kUpgrade linux-image-6.8.0-1038-gkeUpgrade linux-image-6.11.0-1016-gcp-64kUpgrade linux-image-azure-nvidia-6.8Upgrade linux-image-ibm-6.8Upgrade linux-image-6.8.0-1025-gkeopUpgrade linux-image-gkeUpgrade linux-image-gcpUpgrade linux-image-6.8.0-1042-gcp-64kUpgrade linux-image-gcp-64kUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-ibmUpgrade linux-image-realtime-hwe-22.04Upgrade linux-image-6.8.1-1036-realtimeUpgrade linux-image-raspiUpgrade linux-image-generic-6.8Upgrade linux-image-raspi-realtimeUpgrade linux-image-6.11.0-1024-oemUpgrade linux-image-lowlatency-64k-6.11Upgrade linux-image-oracle-64kUpgrade linux-image-azure-fde-edgeUpgrade linux-image-6.14.0-1007-aws-64kUpgrade linux-image-6.14.0-1008-gcpUpgrade linux-image-generic-64kUpgrade linux-image-oem-22.04dUpgrade linux-image-oem-22.04cUpgrade linux-image-kvmUpgrade linux-image-gke-6.8Upgrade linux-image-aws-lts-24.04Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-6.8.0-86-genericUpgrade linux-image-6.14.0-1007-azure-fdeUpgrade linux-image-6.8.0-2032-raspi-realtimeUpgrade linux-image-virtual-6.8Upgrade linux-image-oem-22.04bUpgrade linux-image-6.8.0-1039-ibmUpgrade linux-image-nvidiaUpgrade linux-image-azure-nvidia-lts-24.04Upgrade linux-image-azure-fips-6.8Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-6.11.0-1014-raspiUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-6.11.0-1016-gcpUpgrade linux-image-6.8.0-1041-azureUpgrade linux-image-6.14.0-1007-azureUpgrade linux-image-6.8.0-1041-awsUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-gke-64k-6.8Upgrade linux-image-aws-64kUpgrade linux-image-6.8.0-1041-raspiUpgrade linux-image-6.11.0-1018-azureUpgrade linux-image-6.11.0-1018-azure-fdeUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-azure-6.8Upgrade linux-image-6.8.0-1029-azure-nvidiaUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-azure-lts-24.04Upgrade linux-image-6.8.0-1041-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1041-nvidia-lowlatencyUpgrade linux-image-genericUpgrade linux-image-6.8.0-1038-oracle-64kUpgrade linux-image-oracle-6.8Upgrade linux-image-gkeopUpgrade linux-image-realtime-6.8.1Upgrade linux-image-aws-64k-6.8Upgrade linux-image-oem-22.04aUpgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-azureUpgrade linux-image-generic-hwe-24.04 | Jun 26, 2025 | Apr 16, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub