In the Linux kernel, the following vulnerability has been resolved:
net: decrease cached dst counters in dst_release
Upstream fix ac888d58869b ("net: do not delay dst_entries_add() in dst_release()") moved decrementing the dst count from dst_destroy to dst_release to avoid accessing already freed data in case of netns dismantle. However in case CONFIG_DST_CACHE is enabled and OvS+tunnels are used, this fix is incomplete as the same issue will be seen for cached dsts:
Unable to handle kernel paging request at virtual address ffff5aabf6b5c000 Call trace: percpu_counter_add_batch+0x3c/0x160 (P) dst_release+0xec/0x108 dst_cache_destroy+0x68/0xd8 dst_destroy+0x13c/0x168 dst_destroy_rcu+0x1c/0xb0 rcu_do_batch+0x18c/0x7d0 rcu_core+0x174/0x378 rcu_core_si+0x18/0x30
Fix this by invalidating the cache, and thus decrementing cached dst counters, in dst_release too.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade bpftool-debuginfoUpgrade kernel6.12Upgrade perf6.12Upgrade kernel-libbpf-debuginfoUpgrade kernel-livepatch-6.12.23-29.97Upgrade kernel-modules-extra-commonUpgrade kernel-toolsUpgrade python3-perf6.12Upgrade kernel6.12-modules-extraUpgrade kernel6.12-debuginfoUpgrade kernel-headersUpgrade kernel6.12-debuginfo-common-aarch64Upgrade kernel6.12-debuginfo-common-x86_64Upgrade kernel-libbpf-staticUpgrade kernel-develUpgrade bpftoolUpgrade kernel-libbpfUpgrade perf6.12-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-tools-develUpgrade kernel-libbpf-develUpgrade python3-perf6.12-debuginfo | Jun 24, 2025 | Apr 16, 2025 |
| Debian | — | No solution existsUpgrade linux | May 15, 2025 | Apr 16, 2025 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-abi-stablelistsUpgrade kernelUpgrade python3-perfUpgrade kernel-tools-libsUpgrade bpftoolUpgrade kernel-tools | Oct 14, 2025 | Oct 10, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-tools-libsUpgrade kernelUpgrade python3-perfUpgrade bpftoolUpgrade kernel-abi-stablelistsUpgrade kernel-tools | Nov 12, 2025 | Oct 10, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade kernelUpgrade python3-perfUpgrade bpftoolUpgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libs | Oct 24, 2025 | Oct 10, 2025 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Apr 16, 2025 |
| Suse | — | Upgrade kernel-rt_debugUpgrade dtb-hisiliconUpgrade kernel-kvmsmallUpgrade dtb-amlogicUpgrade dtb-apmUpgrade kernel-azure-extraUpgrade kernel-debug-develUpgrade dtb-appleUpgrade kernel-syms-azureUpgrade dtb-broadcomUpgrade dtb-exynosUpgrade kernel-rt_debug-develUpgrade kernel-64kb-develUpgrade dlm-kmp-64kbUpgrade kernel-zfcpdumpUpgrade dtb-lgUpgrade kernel-azure-optionalUpgrade dtb-marvellUpgrade dtb-freescaleUpgrade dtb-amdUpgrade kernel-default-vdsoUpgrade kernel-macrosUpgrade kernel-rt-optionalUpgrade gfs2-kmp-azureUpgrade kernel-source-azureUpgrade kernel-kvmsmall-vdsoUpgrade ocfs2-kmp-64kbUpgrade kernel-sourceUpgrade kselftests-kmp-64kbUpgrade dtb-caviumUpgrade dtb-alteraUpgrade kernel-obs-qaUpgrade kernel-64kb-optionalUpgrade kernel-default-develUpgrade reiserfs-kmp-defaultUpgrade cluster-md-kmp-azureUpgrade kernel-symsUpgrade gfs2-kmp-64kbUpgrade kernel-default-extraUpgrade kernel-default-livepatchUpgrade kernel-docs-htmlUpgrade kernel-devel-azureUpgrade gfs2-kmp-rtUpgrade kselftests-kmp-azureUpgrade kernel-source-rtUpgrade kernel-debugUpgrade kernel-64kbUpgrade kernel-kvmsmall-develUpgrade ocfs2-kmp-rtUpgrade dtb-amazonUpgrade reiserfs-kmp-64kbUpgrade dtb-nvidiaUpgrade dtb-qcomUpgrade cluster-md-kmp-defaultUpgrade ocfs2-kmp-defaultUpgrade kernel-syms-rtUpgrade kernel-default-livepatch-develUpgrade kernel-default-base-rebuildUpgrade dtb-socionextUpgrade kernel-rt-extraUpgrade dtb-xilinxUpgrade dtb-renesasUpgrade kernel-rtUpgrade kernel-rt-livepatch-develUpgrade kernel-rt-vdsoUpgrade kernel-debug-vdsoUpgrade dtb-sprdUpgrade cluster-md-kmp-64kbUpgrade kselftests-kmp-defaultUpgrade kernel-default-optionalUpgrade kernel-develUpgrade dtb-allwinnerUpgrade dlm-kmp-rtUpgrade dlm-kmp-defaultUpgrade ocfs2-kmp-azureUpgrade kernel-devel-rtUpgrade kernel-obs-buildUpgrade kselftests-kmp-rtUpgrade kernel-rt-develUpgrade kernel-azure-develUpgrade kernel-azureUpgrade dtb-mediatekUpgrade reiserfs-kmp-azureUpgrade kernel-source-vanillaUpgrade kernel-defaultUpgrade dtb-armUpgrade dlm-kmp-azureUpgrade kernel-docsUpgrade kernel-default-baseUpgrade kernel-64kb-extraUpgrade reiserfs-kmp-rtUpgrade dtb-rockchipUpgrade cluster-md-kmp-rtUpgrade gfs2-kmp-defaultUpgrade kernel-rt_debug-vdsoUpgrade kernel-azure-vdso | Dec 5, 2025 | Jun 12, 2025 |
| Ubuntu | — | Upgrade linux-image-6.8.0-1039-ibmUpgrade linux-image-6.8.0-1041-nvidia-lowlatencyUpgrade linux-image-6.8.0-1038-gkeUpgrade linux-image-6.8.1-1036-realtimeUpgrade linux-image-6.8.0-1041-raspiUpgrade linux-image-6.8.0-1041-azureUpgrade linux-image-6.14.0-1007-azureUpgrade linux-image-6.11.0-1018-azure-fdeUpgrade linux-image-6.11.0-1016-gcpUpgrade linux-image-gke-6.8Upgrade linux-image-6.8.0-86-genericUpgrade linux-image-ibm-6.8Upgrade linux-image-6.8.0-1025-gkeopUpgrade linux-image-6.8.0-1042-gcp-64kUpgrade linux-image-6.11.0-1014-raspiUpgrade linux-image-azure-lts-24.04Upgrade linux-image-azure-nvidia-6.8Upgrade linux-image-6.11.0-1016-gcp-64kUpgrade linux-image-6.8.0-1038-oracle-64kUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-raspi-realtimeUpgrade linux-image-raspiUpgrade linux-image-6.8.0-1029-azure-nvidiaUpgrade linux-image-azure-fde-edgeUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-realtime-hwe-22.04Upgrade linux-image-raspi-realtime-6.8Upgrade linux-image-ibmUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-6.8.0-2032-raspi-realtimeUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-gkeopUpgrade linux-image-genericUpgrade linux-image-generic-64kUpgrade linux-image-kvmUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-aws-lts-24.04Upgrade linux-image-gcpUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-aws-64kUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-azureUpgrade linux-image-azure-6.8Upgrade linux-image-6.8.0-1041-awsUpgrade linux-image-generic-6.8Upgrade linux-image-oem-22.04aUpgrade linux-image-6.11.0-1018-azureUpgrade linux-image-realtime-6.8.1Upgrade linux-image-oracle-64kUpgrade linux-image-6.14.0-1007-aws-64kUpgrade linux-image-gcp-6.8Upgrade linux-image-6.8.0-1044-azure-fipsUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-azure-6.11Upgrade linux-image-6.8.0-1041-aws-64kUpgrade linux-image-6.14.0-1007-awsUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-oem-24.04bUpgrade linux-image-awsUpgrade linux-image-6.14.0-22-generic-64kUpgrade linux-image-6.14.0-1008-gcp-64kUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-oem-22.04Upgrade linux-image-ibm-classicUpgrade linux-image-6.8.0-1041-nvidiaUpgrade linux-image-virtualUpgrade linux-image-6.11.0-28-generic-64kUpgrade linux-image-generic-64k-6.8Upgrade linux-image-6.14.0-1004-realtimeUpgrade linux-image-6.11.0-28-genericUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-realtimeUpgrade linux-image-lowlatency-64kUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-6.14.0-1007-oracle-64kUpgrade linux-image-gke-64kUpgrade linux-image-lowlatency-6.11Upgrade linux-image-6.11.0-1011-realtimeUpgrade linux-image-6.11.0-1017-oracleUpgrade linux-image-6.11.0-1017-oracle-64kUpgrade linux-image-6.14.0-1007-oracleUpgrade linux-image-6.8.0-1038-gke-64kUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-lowlatency-6.8Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-generic-lpaeUpgrade linux-image-6.11.0-1015-lowlatency-64kUpgrade linux-image-6.14.0-1007-raspiUpgrade linux-image-azure-fde-6.11Upgrade linux-image-lowlatencyUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-azure-fipsUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-nvidia-6.8Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-6.11.0-1015-lowlatencyUpgrade linux-image-6.11.0-1015-awsUpgrade linux-image-oracleUpgrade linux-image-6.8.0-86-lowlatencyUpgrade linux-image-6.8.0-86-lowlatency-64kUpgrade linux-image-gkeop-6.8Upgrade linux-image-6.8.0-1042-gcpUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-azure-fdeUpgrade linux-image-6.8.0-86-generic-64kUpgrade linux-image-6.8.0-1041-nvidia-64kUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-6.8.0-1038-oracleUpgrade linux-image-6.14.0-22-genericUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-gcp-64k-6.8 | Jun 26, 2025 | Apr 16, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub