In the Linux kernel, the following vulnerability has been resolved:
net: mvpp2: Prevent parser TCAM memory corruption
Protect the parser TCAM/SRAM memory, and the cached (shadow) SRAM information, from concurrent modifications.
Both the TCAM and SRAM tables are indirectly accessed by configuring an index register that selects the row to read or write to. This means that operations must be atomic in order to, e.g., avoid spreading writes across multiple rows. Since the shadow SRAM array is used to find free rows in the hardware table, it must also be protected in order to avoid TOCTOU errors where multiple cores allocate the same row.
This issue was detected in a situation where `mvpp2_set_rx_mode()` ran concurrently on two CPUs. In this particular case the MVPP2_PE_MAC_UC_PROMISCUOUS entry was corrupted, causing the classifier unit to drop all incoming unicast - indicated by the `rx_classifier_drops` counter.
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux-6.1Upgrade linux | Apr 29, 2025 | Apr 16, 2025 |
| Suse | — | Upgrade kernel-azure-optionalUpgrade dtb-allwinnerUpgrade kernel-64kb-optionalUpgrade kernel-default-baseUpgrade cluster-md-kmp-rtUpgrade kernel-default-optionalUpgrade kernel-source-azureUpgrade kernel-symsUpgrade dlm-kmp-64kbUpgrade dtb-rockchipUpgrade dtb-hisiliconUpgrade gfs2-kmp-64kbUpgrade kernel-rt_debug-develUpgrade gfs2-kmp-defaultUpgrade kernel-64kb-develUpgrade kernel-source-vanillaUpgrade dtb-armUpgrade kernel-rt-develUpgrade dtb-amdUpgrade kernel-develUpgrade dtb-caviumUpgrade kernel-default-vdsoUpgrade kernel-debug-develUpgrade cluster-md-kmp-64kbUpgrade kernel-devel-rtUpgrade dtb-xilinxUpgrade kernel-default-base-rebuildUpgrade reiserfs-kmp-azureUpgrade reiserfs-kmp-defaultUpgrade kernel-64kb-extraUpgrade kernel-debugUpgrade dtb-qcomUpgrade dtb-sprdUpgrade dtb-mediatekUpgrade kernel-default-livepatch-develUpgrade ocfs2-kmp-defaultUpgrade dlm-kmp-rtUpgrade dtb-alteraUpgrade kselftests-kmp-64kbUpgrade kernel-sourceUpgrade ocfs2-kmp-azureUpgrade gfs2-kmp-azureUpgrade dtb-exynosUpgrade dtb-renesasUpgrade dtb-lgUpgrade kernel-azureUpgrade dtb-socionextUpgrade reiserfs-kmp-64kbUpgrade kernel-rt_debugUpgrade kernel-obs-qaUpgrade kernel-default-develUpgrade dtb-broadcomUpgrade kernel-rt_debug-vdsoUpgrade dlm-kmp-azureUpgrade dlm-kmp-defaultUpgrade dtb-appleUpgrade kernel-default-livepatchUpgrade kernel-azure-vdsoUpgrade kernel-kvmsmallUpgrade kernel-docs-htmlUpgrade kselftests-kmp-defaultUpgrade kselftests-kmp-rtUpgrade kselftests-kmp-azureUpgrade kernel-obs-buildUpgrade kernel-kvmsmall-vdsoUpgrade kernel-devel-azureUpgrade kernel-rt-livepatch-develUpgrade kernel-kvmsmall-develUpgrade kernel-syms-rtUpgrade kernel-rt-optionalUpgrade cluster-md-kmp-azureUpgrade reiserfs-kmp-rtUpgrade ocfs2-kmp-rtUpgrade kernel-zfcpdumpUpgrade kernel-default-manUpgrade kernel-source-rtUpgrade kernel-azure-extraUpgrade dtb-amazonUpgrade ocfs2-kmp-64kbUpgrade dtb-amlogicUpgrade cluster-md-kmp-defaultUpgrade kernel-64kbUpgrade gfs2-kmp-rtUpgrade dtb-marvellUpgrade kernel-defaultUpgrade kernel-rtUpgrade dtb-nvidiaUpgrade kernel-syms-azureUpgrade kernel-rt-vdsoUpgrade kernel-rt-extraUpgrade kernel-macrosUpgrade kernel-docsUpgrade kernel-default-extraUpgrade kernel-debug-vdsoUpgrade kernel-azure-develUpgrade dtb-freescaleUpgrade dtb-apm | Dec 5, 2025 | May 20, 2025 |
| Ubuntu | — | Upgrade linux-image-5.15.0-1086-realtimeUpgrade linux-image-gke-5.15Upgrade linux-image-kvmUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-lowlatency-6.11Upgrade linux-image-aws-lts-24.04Upgrade linux-image-azure-lts-24.04Upgrade linux-image-aws-fipsUpgrade linux-image-6.8.0-1041-nvidia-lowlatency-64kUpgrade linux-image-aws-64k-6.8Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.8.0-1038-oracleUpgrade linux-image-6.8.0-1038-oracle-64kUpgrade linux-image-6.14.0-22-genericUpgrade linux-image-6.8.0-1042-gcpUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-6.14.0-1007-oracle-64kUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-aws-lts-22.04Upgrade linux-image-6.14.0-1007-awsUpgrade linux-image-5.15.0-142-fipsUpgrade linux-image-azure-fde-edgeUpgrade linux-image-virtual-6.8Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-oracle-6.8Upgrade linux-image-oem-22.04bUpgrade linux-image-gcp-6.8Upgrade linux-image-raspi-6.8Upgrade linux-image-azure-fipsUpgrade linux-image-gcp-64kUpgrade linux-image-realtime-6.8.1Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-ibm-6.8Upgrade linux-image-6.8.0-1041-nvidia-lowlatencyUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-oem-20.04dUpgrade linux-image-gcp-fipsUpgrade linux-image-5.15.0-1091-azureUpgrade linux-image-6.8.0-86-genericUpgrade linux-image-5.15.0-1039-nvidia-tegra-rtUpgrade linux-image-6.8.0-86-lowlatency-64kUpgrade linux-image-generic-6.8Upgrade linux-image-5.15.0-142-lowlatencyUpgrade linux-image-azure-6.11Upgrade linux-image-6.11.0-28-generic-64kUpgrade linux-image-azure-fde-6.11Upgrade linux-image-6.11.0-1018-azure-fdeUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-5.15.0-1050-xilinx-zynqmpUpgrade linux-image-5.15.0-142-genericUpgrade linux-image-5.15.0-142-generic-lpaeUpgrade linux-image-6.14.0-1007-raspiUpgrade linux-image-gkeop-6.8Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-nvidia-tegra-igxUpgrade linux-image-azureUpgrade linux-image-5.15.0-1083-gkeUpgrade linux-image-6.14.0-1008-gcpUpgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-6.11.0-1015-lowlatency-64kUpgrade linux-image-azure-nvidia-6.8Upgrade linux-image-gke-64kUpgrade linux-image-6.8.0-1041-nvidia-64kUpgrade linux-image-azure-cvmUpgrade linux-image-azure-fdeUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-5.15.0-1083-intel-iotgUpgrade linux-image-6.14.0-1007-azureUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-6.11.0-1017-oracle-64kUpgrade linux-image-raspiUpgrade linux-image-raspi-nolpaeUpgrade linux-image-6.11.0-1017-oracleUpgrade linux-image-oracleUpgrade linux-image-aws-6.8Upgrade linux-image-generic-64k-6.8Upgrade linux-image-5.15.0-1039-nvidia-tegraUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.8.0-86-generic-64kUpgrade linux-image-azure-fips-6.8Upgrade linux-image-6.8.0-1025-gkeopUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-5.15.0-1028-nvidia-tegra-igx-rtUpgrade linux-image-5.15.0-1086-aws-fipsUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-ibm-classicUpgrade linux-image-oem-24.04bUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.15.0-1086-awsUpgrade linux-image-lowlatency-64k-6.11Upgrade linux-image-6.11.0-28-genericUpgrade linux-image-6.8.0-2032-raspi-realtimeUpgrade linux-image-6.14.0-1007-aws-64kUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-ibmUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-oem-22.04aUpgrade linux-image-6.8.0-1041-nvidiaUpgrade linux-image-awsUpgrade linux-image-lowlatency-6.8Upgrade linux-image-5.15.0-1028-nvidia-tegra-igxUpgrade linux-image-6.14.0-1004-realtimeUpgrade linux-image-5.15.0-1086-aws-64kUpgrade linux-image-5.15.0-1080-nvidiaUpgrade linux-image-6.14.0-22-generic-64kUpgrade linux-image-5.15.0-1082-kvmUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-oem-22.04cUpgrade linux-image-azure-lts-22.04Upgrade linux-image-5.15.0-1085-gcp-fipsUpgrade linux-image-5.15.0-1068-gkeopUpgrade linux-image-5.15.0-1083-oracleUpgrade linux-image-generic-64kUpgrade linux-image-6.8.0-1038-gkeUpgrade linux-image-6.11.0-1016-gcpUpgrade linux-image-gke-64k-6.8Upgrade linux-image-6.11.0-1018-azureUpgrade linux-image-6.11.0-1011-realtimeUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-intelUpgrade linux-image-6.8.0-1044-azure-fipsUpgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-6.8.0-1041-awsUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-gke-6.8Upgrade linux-image-6.11.0-1014-raspiUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-6.11.0-1015-awsUpgrade linux-image-5.15.0-1081-intel-iotgUpgrade linux-image-gkeUpgrade linux-image-gkeopUpgrade linux-image-nvidia-6.8Upgrade linux-image-6.11.0-1016-gcp-64kUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-6.8.0-1041-azureUpgrade linux-image-5.15.0-1091-azure-fipsUpgrade linux-image-5.15.0-1080-raspiUpgrade linux-image-fipsUpgrade linux-image-5.15.0-1085-gcpUpgrade linux-image-oem-22.04dUpgrade linux-image-raspi-realtimeUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-oem-22.04Upgrade linux-image-oem-20.04bUpgrade linux-image-intel-iotg-5.15Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-6.8.0-86-lowlatencyUpgrade linux-image-genericUpgrade linux-image-6.8.0-1041-raspiUpgrade linux-image-5.15.0-142-generic-64kUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-5.15.0-1078-ibmUpgrade linux-image-nvidia-64kUpgrade linux-image-oem-20.04cUpgrade linux-image-gkeop-5.15Upgrade linux-image-5.15.0-1080-nvidia-lowlatencyUpgrade linux-image-generic-lpaeUpgrade linux-image-aws-64kUpgrade linux-image-6.11.0-1015-lowlatencyUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-oracle-64kUpgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-6.14.0-1008-gcp-64kUpgrade linux-image-realtimeUpgrade linux-image-oem-20.04Upgrade linux-image-6.14.0-1007-azure-fdeUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-lowlatency-64kUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-6.8.0-1029-azure-nvidiaUpgrade linux-image-6.11.0-1024-oemUpgrade linux-image-6.14.0-1007-oracleUpgrade linux-image-5.15.0-142-lowlatency-64kUpgrade linux-image-6.8.0-1039-ibmUpgrade linux-image-lowlatencyUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-6.8.1-1036-realtimeUpgrade linux-image-gcpUpgrade linux-image-azure-nvidia-lts-24.04Upgrade linux-image-intel-iot-realtimeUpgrade linux-image-5.15.0-1079-intel-iot-realtimeUpgrade linux-image-6.8.0-1038-gke-64kUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-virtualUpgrade linux-image-nvidiaUpgrade linux-image-nvidia-tegraUpgrade linux-image-realtime-hwe-22.04Upgrade linux-image-intel-iotgUpgrade linux-image-azure-6.8Upgrade linux-image-6.8.0-1041-aws-64kUpgrade linux-image-6.8.0-1042-gcp-64k | Jun 20, 2025 | Apr 16, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub