In the Linux kernel, the following vulnerability has been resolved:
net: decrease cached dst counters in dst_release
Upstream fix ac888d58869b ("net: do not delay dst_entries_add() in dst_release()") moved decrementing the dst count from dst_destroy to dst_release to avoid accessing already freed data in case of netns dismantle. However in case CONFIG_DST_CACHE is enabled and OvS+tunnels are used, this fix is incomplete as the same issue will be seen for cached dsts:
Unable to handle kernel paging request at virtual address ffff5aabf6b5c000 Call trace: percpu_counter_add_batch+0x3c/0x160 (P) dst_release+0xec/0x108 dst_cache_destroy+0x68/0xd8 dst_destroy+0x13c/0x168 dst_destroy_rcu+0x1c/0xb0 rcu_do_batch+0x18c/0x7d0 rcu_core+0x174/0x378 rcu_core_si+0x18/0x30
Fix this by invalidating the cache, and thus decrementing cached dst counters, in dst_release too.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade kernel-headersUpgrade bpftoolUpgrade python3-perf6.12Upgrade kernel6.12-debuginfoUpgrade kernel-libbpfUpgrade kernel-tools-develUpgrade perf6.12-debuginfoUpgrade kernel-libbpf-develUpgrade kernel-tools-debuginfoUpgrade kernel6.12-modules-extraUpgrade python3-perf6.12-debuginfoUpgrade kernel-develUpgrade kernel6.12-debuginfo-common-x86_64Upgrade kernel-libbpf-staticUpgrade kernel6.12-debuginfo-common-aarch64Upgrade bpftool-debuginfoUpgrade kernel-livepatch-6.12.23-29.97Upgrade perf6.12Upgrade kernel-libbpf-debuginfoUpgrade kernel-toolsUpgrade kernel-modules-extra-commonUpgrade kernel6.12 | Jun 24, 2025 | Apr 16, 2025 |
| Debian | — | Upgrade linuxNo solution exists | May 15, 2025 | Apr 16, 2025 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-abi-stablelistsUpgrade kernelUpgrade python3-perfUpgrade bpftoolUpgrade kernel-toolsUpgrade kernel-tools-libs | Oct 14, 2025 | Oct 10, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade bpftoolUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel | Nov 12, 2025 | Oct 10, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade python3-perfUpgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade kernelUpgrade bpftool | Oct 24, 2025 | Oct 10, 2025 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Apr 16, 2025 |
| Suse | — | Upgrade reiserfs-kmp-azureUpgrade gfs2-kmp-defaultUpgrade kernel-azure-develUpgrade kernel-source-vanillaUpgrade kernel-azureUpgrade kernel-64kb-extraUpgrade kernel-rt_debug-vdsoUpgrade reiserfs-kmp-rtUpgrade dtb-mediatekUpgrade dtb-rockchipUpgrade cluster-md-kmp-rtUpgrade kernel-rt-develUpgrade ocfs2-kmp-azureUpgrade dlm-kmp-defaultUpgrade dlm-kmp-rtUpgrade kernel-rtUpgrade kernel-develUpgrade kernel-default-baseUpgrade kselftests-kmp-defaultUpgrade kernel-defaultUpgrade kernel-rt-vdsoUpgrade kernel-default-optionalUpgrade kernel-default-livepatch-develUpgrade kernel-rt-extraUpgrade kernel-default-base-rebuildUpgrade kernel-syms-rtUpgrade kernel-debug-vdsoUpgrade ocfs2-kmp-defaultUpgrade dtb-socionextUpgrade dtb-xilinxUpgrade kernel-rt-livepatch-develUpgrade kselftests-kmp-rtUpgrade dlm-kmp-azureUpgrade cluster-md-kmp-64kbUpgrade dtb-qcomUpgrade kernel-docsUpgrade dtb-sprdUpgrade kernel-azure-vdsoUpgrade kernel-devel-rtUpgrade dtb-renesasUpgrade dtb-allwinnerUpgrade dtb-nvidiaUpgrade cluster-md-kmp-defaultUpgrade kernel-obs-buildUpgrade dtb-armUpgrade dtb-apmUpgrade dtb-broadcomUpgrade kernel-azure-extraUpgrade dtb-appleUpgrade kernel-syms-azureUpgrade kernel-rt_debug-develUpgrade dtb-freescaleUpgrade kernel-zfcpdumpUpgrade dlm-kmp-64kbUpgrade kernel-azure-optionalUpgrade gfs2-kmp-azureUpgrade dtb-marvellUpgrade kernel-rt_debugUpgrade dtb-lgUpgrade kernel-debugUpgrade gfs2-kmp-rtUpgrade dtb-hisiliconUpgrade dtb-amlogicUpgrade kernel-kvmsmallUpgrade kernel-debug-develUpgrade kernel-macrosUpgrade kernel-default-vdsoUpgrade dtb-amdUpgrade kernel-rt-optionalUpgrade kernel-source-rtUpgrade kernel-kvmsmall-vdsoUpgrade ocfs2-kmp-rtUpgrade dtb-amazonUpgrade reiserfs-kmp-64kbUpgrade kernel-source-azureUpgrade kernel-64kb-develUpgrade cluster-md-kmp-azureUpgrade gfs2-kmp-64kbUpgrade reiserfs-kmp-defaultUpgrade kernel-symsUpgrade kernel-docs-htmlUpgrade kernel-default-livepatchUpgrade kernel-default-extraUpgrade kernel-64kbUpgrade kselftests-kmp-azureUpgrade dtb-caviumUpgrade ocfs2-kmp-64kbUpgrade kernel-64kb-optionalUpgrade kernel-obs-qaUpgrade kernel-devel-azureUpgrade kernel-kvmsmall-develUpgrade kernel-sourceUpgrade dtb-alteraUpgrade kselftests-kmp-64kbUpgrade kernel-default-develUpgrade dtb-exynos | Dec 5, 2025 | Jun 12, 2025 |
| Ubuntu | — | Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-6.11.0-1014-raspiUpgrade linux-image-6.8.0-2032-raspi-realtimeUpgrade linux-image-6.14.0-1007-azure-fdeUpgrade linux-image-6.8.0-86-genericUpgrade linux-image-generic-64kUpgrade linux-image-nvidia-64kUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-6.8.0-1042-gcp-64kUpgrade linux-image-ibm-6.8Upgrade linux-image-gcpUpgrade linux-image-gke-6.8Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-gke-64k-6.8Upgrade linux-image-virtual-6.8Upgrade linux-image-raspi-realtimeUpgrade linux-image-gkeUpgrade linux-image-raspiUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-6.8.0-1038-gkeUpgrade linux-image-oem-22.04cUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-6.8.0-1025-gkeopUpgrade linux-image-azure-nvidia-lts-24.04Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-6.11.0-1016-gcpUpgrade linux-image-azure-6.8Upgrade linux-image-azure-fde-edgeUpgrade linux-image-6.8.1-1036-realtimeUpgrade linux-image-6.14.0-1007-azureUpgrade linux-image-gcp-64kUpgrade linux-image-ibmUpgrade linux-image-6.8.0-1041-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1029-azure-nvidiaUpgrade linux-image-6.8.0-1038-oracle-64kUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.8.0-1041-nvidia-lowlatencyUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-realtime-hwe-22.04Upgrade linux-image-azure-lts-24.04Upgrade linux-image-oracle-64kUpgrade linux-image-6.14.0-1007-aws-64kUpgrade linux-image-oem-22.04dUpgrade linux-image-6.11.0-1016-gcp-64kUpgrade linux-image-6.14.0-1008-gcpUpgrade linux-image-aws-lts-24.04Upgrade linux-image-kvmUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-raspi-6.8Upgrade linux-image-6.11.0-1024-oemUpgrade linux-image-lowlatency-64k-6.11Upgrade linux-image-azure-nvidia-6.8Upgrade linux-image-generic-6.8Upgrade linux-image-oem-22.04aUpgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-oem-22.04bUpgrade linux-image-aws-64k-6.8Upgrade linux-image-genericUpgrade linux-image-aws-6.8Upgrade linux-image-nvidiaUpgrade linux-image-aws-64kUpgrade linux-image-6.11.0-1018-azure-fdeUpgrade linux-image-6.8.0-1041-azureUpgrade linux-image-oracle-6.8Upgrade linux-image-6.8.0-1039-ibmUpgrade linux-image-6.8.0-1041-awsUpgrade linux-image-realtime-6.8.1Upgrade linux-image-azure-fips-6.8Upgrade linux-image-azureUpgrade linux-image-6.11.0-1018-azureUpgrade linux-image-gkeopUpgrade linux-image-6.8.0-1041-raspiUpgrade linux-image-generic-64k-6.8Upgrade linux-image-6.8.0-1041-nvidiaUpgrade linux-image-oem-22.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-gkeop-6.8Upgrade linux-image-6.8.0-86-generic-64kUpgrade linux-image-6.8.0-86-lowlatency-64kUpgrade linux-image-6.8.0-1042-gcpUpgrade linux-image-6.8.0-1038-oracleUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.11.0-28-generic-64kUpgrade linux-image-realtimeUpgrade linux-image-6.11.0-1017-oracle-64kUpgrade linux-image-6.8.0-1044-azure-fipsUpgrade linux-image-awsUpgrade linux-image-6.14.0-22-generic-64kUpgrade linux-image-6.14.0-1008-gcp-64kUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-ibm-classicUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-nvidia-6.8Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-6.8.0-86-lowlatencyUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-azure-fipsUpgrade linux-image-6.11.0-1015-lowlatencyUpgrade linux-image-6.11.0-1015-awsUpgrade linux-image-oracleUpgrade linux-image-lowlatencyUpgrade linux-image-azure-fdeUpgrade linux-image-oem-24.04bUpgrade linux-image-6.8.0-1041-nvidia-64kUpgrade linux-image-6.14.0-22-genericUpgrade linux-image-gcp-6.8Upgrade linux-image-lowlatency-6.8Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-generic-lpaeUpgrade linux-image-azure-6.11Upgrade linux-image-gke-64kUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-6.14.0-1007-raspiUpgrade linux-image-6.11.0-1015-lowlatency-64kUpgrade linux-image-azure-fde-6.11Upgrade linux-image-6.14.0-1007-awsUpgrade linux-image-6.8.0-1041-aws-64kUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-virtualUpgrade linux-image-6.11.0-1017-oracleUpgrade linux-image-6.11.0-1011-realtimeUpgrade linux-image-lowlatency-6.11Upgrade linux-image-6.14.0-1007-oracleUpgrade linux-image-6.14.0-1004-realtimeUpgrade linux-image-6.8.0-1038-gke-64kUpgrade linux-image-6.14.0-1007-oracle-64kUpgrade linux-image-6.11.0-28-genericUpgrade linux-image-lowlatency-64k | Jun 26, 2025 | Apr 16, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub