In the Linux kernel, the following vulnerability has been resolved:
net: decrease cached dst counters in dst_release
Upstream fix ac888d58869b ("net: do not delay dst_entries_add() in dst_release()") moved decrementing the dst count from dst_destroy to dst_release to avoid accessing already freed data in case of netns dismantle. However in case CONFIG_DST_CACHE is enabled and OvS+tunnels are used, this fix is incomplete as the same issue will be seen for cached dsts:
Unable to handle kernel paging request at virtual address ffff5aabf6b5c000 Call trace: percpu_counter_add_batch+0x3c/0x160 (P) dst_release+0xec/0x108 dst_cache_destroy+0x68/0xd8 dst_destroy+0x13c/0x168 dst_destroy_rcu+0x1c/0xb0 rcu_do_batch+0x18c/0x7d0 rcu_core+0x174/0x378 rcu_core_si+0x18/0x30
Fix this by invalidating the cache, and thus decrementing cached dst counters, in dst_release too.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade kernel-libbpf-staticUpgrade kernel6.12-debuginfoUpgrade kernel6.12-modules-extraUpgrade kernel-headersUpgrade python3-perf6.12Upgrade kernel-tools-debuginfoUpgrade kernel6.12-debuginfo-common-x86_64Upgrade kernel6.12-debuginfo-common-aarch64Upgrade bpftoolUpgrade python3-perf6.12-debuginfoUpgrade perf6.12-debuginfoUpgrade kernel-tools-develUpgrade kernel-libbpf-develUpgrade kernel-develUpgrade kernel-libbpfUpgrade kernel-livepatch-6.12.23-29.97Upgrade kernel6.12Upgrade kernel-modules-extra-commonUpgrade perf6.12Upgrade kernel-libbpf-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-tools | Jun 24, 2025 | Apr 16, 2025 |
| Debian | — | Upgrade linux | May 15, 2025 | Apr 16, 2025 |
| Huawei Euleros 2_0_sp11 | — | Upgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade kernel-toolsUpgrade bpftoolUpgrade kernel-tools-libs | Oct 14, 2025 | Oct 10, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernelUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade bpftoolUpgrade kernel-tools | Nov 12, 2025 | Oct 10, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade kernelUpgrade python3-perfUpgrade kernel-toolsUpgrade bpftoolUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libs | Oct 24, 2025 | Oct 10, 2025 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Apr 16, 2025 |
| Suse | — | Upgrade kernel-rt_debug-vdsoUpgrade kernel-64kb-extraUpgrade kernel-azureUpgrade reiserfs-kmp-rtUpgrade kernel-source-vanillaUpgrade reiserfs-kmp-azureUpgrade dtb-mediatekUpgrade cluster-md-kmp-rtUpgrade kselftests-kmp-defaultUpgrade kernel-default-optionalUpgrade kernel-rt-vdsoUpgrade kernel-develUpgrade kernel-rtUpgrade kernel-azure-develUpgrade dtb-rockchipUpgrade gfs2-kmp-defaultUpgrade kernel-rt-extraUpgrade dtb-armUpgrade kernel-default-baseUpgrade dlm-kmp-azureUpgrade kernel-defaultUpgrade kernel-docsUpgrade kernel-devel-rtUpgrade kernel-rt-develUpgrade dlm-kmp-defaultUpgrade dlm-kmp-rtUpgrade dtb-sprdUpgrade kernel-rt-livepatch-develUpgrade kselftests-kmp-rtUpgrade dtb-allwinnerUpgrade dtb-renesasUpgrade kernel-debug-vdsoUpgrade dtb-nvidiaUpgrade kernel-obs-buildUpgrade kernel-default-base-rebuildUpgrade cluster-md-kmp-64kbUpgrade ocfs2-kmp-azureUpgrade cluster-md-kmp-defaultUpgrade dtb-qcomUpgrade ocfs2-kmp-defaultUpgrade dtb-socionextUpgrade kernel-syms-rtUpgrade dtb-xilinxUpgrade kernel-default-livepatch-develUpgrade kernel-azure-vdsoUpgrade kernel-kvmsmallUpgrade dtb-amlogicUpgrade kselftests-kmp-64kbUpgrade dlm-kmp-64kbUpgrade kernel-zfcpdumpUpgrade kernel-default-livepatchUpgrade kernel-default-extraUpgrade kernel-symsUpgrade kernel-docs-htmlUpgrade cluster-md-kmp-azureUpgrade reiserfs-kmp-defaultUpgrade kernel-64kbUpgrade gfs2-kmp-rtUpgrade dtb-hisiliconUpgrade kernel-azure-extraUpgrade kernel-sourceUpgrade dtb-alteraUpgrade kernel-default-develUpgrade kernel-azure-optionalUpgrade dtb-exynosUpgrade dtb-broadcomUpgrade dtb-appleUpgrade kernel-syms-azureUpgrade kselftests-kmp-azureUpgrade dtb-caviumUpgrade kernel-obs-qaUpgrade kernel-kvmsmall-develUpgrade kernel-64kb-optionalUpgrade kernel-devel-azureUpgrade kernel-rt_debug-develUpgrade dtb-freescaleUpgrade ocfs2-kmp-64kbUpgrade kernel-source-azureUpgrade kernel-rt-optionalUpgrade kernel-macrosUpgrade dtb-amdUpgrade kernel-default-vdsoUpgrade kernel-64kb-develUpgrade dtb-amazonUpgrade reiserfs-kmp-64kbUpgrade ocfs2-kmp-rtUpgrade kernel-source-rtUpgrade kernel-kvmsmall-vdsoUpgrade kernel-debugUpgrade kernel-debug-develUpgrade dtb-apmUpgrade kernel-rt_debugUpgrade gfs2-kmp-azureUpgrade dtb-marvellUpgrade dtb-lgUpgrade gfs2-kmp-64kb | Dec 5, 2025 | Jun 12, 2025 |
| Ubuntu | — | Upgrade linux-image-gkeop-6.8Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-6.11.0-1017-oracleUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-lowlatency-6.11Upgrade linux-image-6.11.0-1011-realtimeUpgrade linux-image-gke-64kUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-virtualUpgrade linux-image-6.14.0-1007-oracle-64kUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-6.8.0-86-generic-64kUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-lowlatencyUpgrade linux-image-6.8.0-1042-gcpUpgrade linux-image-azure-fdeUpgrade linux-image-gcp-6.8Upgrade linux-image-azure-fipsUpgrade linux-image-ibm-classicUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-azure-fde-6.11Upgrade linux-image-6.14.0-1007-raspiUpgrade linux-image-6.11.0-1015-lowlatency-64kUpgrade linux-image-6.11.0-1015-lowlatencyUpgrade linux-image-oracleUpgrade linux-image-6.8.0-86-lowlatencyUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-6.11.0-1015-awsUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-6.8.0-1038-oracleUpgrade linux-image-6.8.0-86-lowlatency-64kUpgrade linux-image-awsUpgrade linux-image-lowlatency-6.8Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-generic-lpaeUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-6.14.0-22-generic-64kUpgrade linux-image-oem-22.04Upgrade linux-image-6.14.0-1007-awsUpgrade linux-image-6.8.0-1041-aws-64kUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-6.14.0-1004-realtimeUpgrade linux-image-realtimeUpgrade linux-image-azure-6.11Upgrade linux-image-6.14.0-1008-gcp-64kUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-6.11.0-28-genericUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-nvidia-6.8Upgrade linux-image-6.14.0-22-genericUpgrade linux-image-generic-64k-6.8Upgrade linux-image-6.8.0-1038-gke-64kUpgrade linux-image-6.8.0-1041-nvidia-64kUpgrade linux-image-6.11.0-1017-oracle-64kUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.14.0-1007-oracleUpgrade linux-image-6.8.0-1044-azure-fipsUpgrade linux-image-oem-24.04bUpgrade linux-image-6.11.0-28-generic-64kUpgrade linux-image-6.8.0-1041-nvidiaUpgrade linux-image-6.8.0-1042-gcp-64kUpgrade linux-image-6.8.0-1038-oracle-64kUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-6.14.0-1008-gcpUpgrade linux-image-generic-64kUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-gke-64k-6.8Upgrade linux-image-6.8.0-86-genericUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-azure-fips-6.8Upgrade linux-image-azureUpgrade linux-image-6.11.0-1024-oemUpgrade linux-image-gcpUpgrade linux-image-raspi-6.8Upgrade linux-image-lowlatency-64k-6.11Upgrade linux-image-nvidia-64kUpgrade linux-image-gkeUpgrade linux-image-ibm-6.8Upgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-6.8.0-1025-gkeopUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-realtime-6.8.1Upgrade linux-image-oem-22.04aUpgrade linux-image-oracle-6.8Upgrade linux-image-6.11.0-1018-azureUpgrade linux-image-6.8.0-1041-azureUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-6.8.0-1041-raspiUpgrade linux-image-6.11.0-1016-gcpUpgrade linux-image-6.8.0-1041-awsUpgrade linux-image-6.11.0-1018-azure-fdeUpgrade linux-image-6.8.0-1039-ibmUpgrade linux-image-6.14.0-1007-azureUpgrade linux-image-aws-64kUpgrade linux-image-gkeopUpgrade linux-image-azure-fde-edgeUpgrade linux-image-gcp-64kUpgrade linux-image-realtime-hwe-22.04Upgrade linux-image-6.8.0-1041-nvidia-lowlatencyUpgrade linux-image-ibmUpgrade linux-image-azure-lts-24.04Upgrade linux-image-azure-6.8Upgrade linux-image-6.8.0-1029-azure-nvidiaUpgrade linux-image-6.8.1-1036-realtimeUpgrade linux-image-6.8.0-1041-nvidia-lowlatency-64kUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-genericUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-6.8.0-2032-raspi-realtimeUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.11.0-1014-raspiUpgrade linux-image-raspi-realtimeUpgrade linux-image-raspiUpgrade linux-image-azure-nvidia-6.8Upgrade linux-image-6.8.0-1038-gkeUpgrade linux-image-6.11.0-1016-gcp-64kUpgrade linux-image-generic-6.8Upgrade linux-image-aws-6.8Upgrade linux-image-aws-64k-6.8Upgrade linux-image-aws-lts-24.04Upgrade linux-image-virtual-6.8Upgrade linux-image-oem-22.04bUpgrade linux-image-nvidiaUpgrade linux-image-azure-nvidia-lts-24.04Upgrade linux-image-6.14.0-1007-azure-fdeUpgrade linux-image-oracle-64kUpgrade linux-image-kvmUpgrade linux-image-oem-22.04dUpgrade linux-image-oem-22.04cUpgrade linux-image-gke-6.8Upgrade linux-image-6.14.0-1007-aws-64k | Jun 26, 2025 | Apr 16, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub