In the Linux kernel, the following vulnerability has been resolved:
idpf: fix adapter NULL pointer dereference on reboot
With SRIOV enabled, idpf ends up calling into idpf_remove() twice. First via idpf_shutdown() and then again when idpf_remove() calls into sriov_disable(), because the VF devices use the idpf driver, hence the same remove routine. When that happens, it is possible for the adapter to be NULL from the first call to idpf_remove(), leading to a NULL pointer dereference.
echo 1 > /sys/class/net/<netif>/device/sriov_numvfs reboot
BUG: kernel NULL pointer dereference, address: 0000000000000020 ... RIP: 0010:idpf_remove+0x22/0x1f0 [idpf] ... ? idpf_remove+0x22/0x1f0 [idpf] ? idpf_remove+0x1e4/0x1f0 [idpf] pci_device_remove+0x3f/0xb0 device_release_driver_internal+0x19f/0x200 pci_stop_bus_device+0x6d/0x90 pci_stop_and_remove_bus_device+0x12/0x20 pci_iov_remove_virtfn+0xbe/0x120 sriov_disable+0x34/0xe0 idpf_sriov_configure+0x58/0x140 [idpf] idpf_remove+0x1b9/0x1f0 [idpf] idpf_shutdown+0x12/0x30 [idpf] pci_device_shutdown+0x35/0x60 device_shutdown+0x156/0x200 ...
Replace the direct idpf_remove() call in idpf_shutdown() with idpf_vc_core_deinit() and idpf_deinit_dflt_mbx(), which perform the bulk of the cleanup, such as stopping the init task, freeing IRQs, destroying the vports and freeing the mailbox. This avoids the calls to sriov_disable() in addition to a small netdev cleanup, and destroying workqueues, which don't seem to be required on shutdown.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 23, 2026 | Jul 23, 2026 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Apr 16, 2025 |
| Suse | — | Upgrade kernel-devel-azureUpgrade kernel-source-azureUpgrade kernel-develUpgrade dtb-lgUpgrade kernel-kvmsmallUpgrade ocfs2-kmp-rtUpgrade ocfs2-kmp-64kbUpgrade gfs2-kmp-rtUpgrade kernel-default-baseUpgrade kernel-debug-develUpgrade kernel-default-livepatch-develUpgrade ocfs2-kmp-defaultUpgrade cluster-md-kmp-defaultUpgrade dtb-amazonUpgrade dtb-amdUpgrade cluster-md-kmp-rtUpgrade dtb-apmUpgrade kernel-docs-htmlUpgrade kernel-macrosUpgrade reiserfs-kmp-rtUpgrade dtb-freescaleUpgrade kernel-64kbUpgrade dtb-broadcomUpgrade dtb-alteraUpgrade kernel-debugUpgrade dtb-exynosUpgrade dtb-mediatekUpgrade kernel-default-extraUpgrade kernel-rt-develUpgrade dtb-marvellUpgrade dtb-xilinxUpgrade kernel-devel-rtUpgrade kernel-obs-qaUpgrade cluster-md-kmp-azureUpgrade dtb-renesasUpgrade dlm-kmp-64kbUpgrade kernel-default-livepatchUpgrade kernel-zfcpdumpUpgrade reiserfs-kmp-defaultUpgrade gfs2-kmp-64kbUpgrade kernel-azure-extraUpgrade dtb-hisiliconUpgrade kernel-default-develUpgrade ocfs2-kmp-azureUpgrade dtb-allwinnerUpgrade dtb-socionextUpgrade kernel-symsUpgrade kselftests-kmp-64kbUpgrade kernel-64kb-optionalUpgrade kernel-azure-optionalUpgrade kernel-kvmsmall-develUpgrade dtb-appleUpgrade kernel-64kb-develUpgrade kernel-rt_debugUpgrade kernel-default-optionalUpgrade dlm-kmp-defaultUpgrade kernel-sourceUpgrade dtb-sprdUpgrade kernel-syms-azureUpgrade kselftests-kmp-defaultUpgrade dtb-qcomUpgrade kernel-source-vanillaUpgrade kernel-rt-vdsoUpgrade dlm-kmp-rtUpgrade cluster-md-kmp-64kbUpgrade kernel-azure-develUpgrade dtb-amlogicUpgrade gfs2-kmp-azureUpgrade kernel-rt_debug-vdsoUpgrade kernel-source-rtUpgrade dtb-caviumUpgrade kernel-default-base-rebuildUpgrade dtb-armUpgrade dlm-kmp-azureUpgrade kernel-azureUpgrade kernel-rt-optionalUpgrade kernel-rtUpgrade kernel-docsUpgrade kernel-obs-buildUpgrade kernel-default-vdsoUpgrade dtb-nvidiaUpgrade reiserfs-kmp-azureUpgrade kselftests-kmp-rtUpgrade kernel-rt_debug-develUpgrade kernel-rt-extraUpgrade kernel-defaultUpgrade kernel-debug-vdsoUpgrade dtb-rockchipUpgrade reiserfs-kmp-64kbUpgrade kselftests-kmp-azureUpgrade kernel-syms-rtUpgrade kernel-rt-livepatch-develUpgrade kernel-azure-vdsoUpgrade kernel-kvmsmall-vdsoUpgrade kernel-64kb-extraUpgrade gfs2-kmp-default | Dec 5, 2025 | May 21, 2025 |
| Ubuntu | — | Upgrade linux-image-6.8.1-1036-realtimeUpgrade linux-image-6.11.0-1018-azure-fdeUpgrade linux-image-6.11.0-1015-lowlatency-64kUpgrade linux-image-raspi-realtimeUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-6.11.0-1024-oemUpgrade linux-image-awsUpgrade linux-image-nvidia-6.8Upgrade linux-image-oem-22.04dUpgrade linux-image-6.8.0-2032-raspi-realtimeUpgrade linux-image-oracle-6.8Upgrade linux-image-gcp-64k-6.8Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-azureUpgrade linux-image-gke-6.8Upgrade linux-image-6.8.0-1038-gkeUpgrade linux-image-azure-6.8Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-generic-64k-6.8Upgrade linux-image-nvidia-64kUpgrade linux-image-realtime-6.8.1Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-6.11.0-1017-oracleUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-gcpUpgrade linux-image-6.8.0-1041-aws-64kUpgrade linux-image-6.14.0-1007-azure-fdeUpgrade linux-image-6.14.0-1007-azureUpgrade linux-image-6.8.0-1041-nvidia-lowlatency-64kUpgrade linux-image-6.14.0-22-genericUpgrade linux-image-6.8.0-1042-gcp-64kUpgrade linux-image-6.14.0-1008-gcp-64kUpgrade linux-image-6.11.0-1016-gcpUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-aws-6.8Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-kvmUpgrade linux-image-lowlatency-64k-6.11Upgrade linux-image-6.8.0-1025-gkeopUpgrade linux-image-6.8.0-1041-nvidia-lowlatencyUpgrade linux-image-6.8.0-1041-azureUpgrade linux-image-6.8.0-1042-gcpUpgrade linux-image-aws-64k-6.8Upgrade linux-image-6.8.0-86-lowlatency-64kUpgrade linux-image-azure-nvidia-lts-24.04Upgrade linux-image-oracle-64kUpgrade linux-image-gke-64k-6.8Upgrade linux-image-virtual-6.8Upgrade linux-image-lowlatency-6.11Upgrade linux-image-6.11.0-28-generic-64kUpgrade linux-image-azure-fipsUpgrade linux-image-6.14.0-1007-aws-64kUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-6.8.0-1038-oracle-64kUpgrade linux-image-realtimeUpgrade linux-image-6.11.0-1014-raspiUpgrade linux-image-oem-22.04cUpgrade linux-image-gke-64kUpgrade linux-image-realtime-hwe-22.04Upgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-gkeUpgrade linux-image-oem-22.04bUpgrade linux-image-6.11.0-1016-gcp-64kUpgrade linux-image-6.14.0-1007-oracleUpgrade linux-image-raspi-6.8Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-raspiUpgrade linux-image-6.8.0-1039-ibmUpgrade linux-image-azure-fips-6.8Upgrade linux-image-gcp-64kUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-aws-lts-24.04Upgrade linux-image-azure-fde-6.11Upgrade linux-image-azure-6.11Upgrade linux-image-generic-64kUpgrade linux-image-6.8.0-86-lowlatencyUpgrade linux-image-ibm-classicUpgrade linux-image-azure-lts-24.04Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.11.0-1015-lowlatencyUpgrade linux-image-oem-22.04aUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-6.14.0-22-generic-64kUpgrade linux-image-6.11.0-28-genericUpgrade linux-image-6.8.0-86-genericUpgrade linux-image-virtualUpgrade linux-image-6.11.0-1015-awsUpgrade linux-image-6.8.0-1038-gke-64kUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-lowlatencyUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-azure-fde-edgeUpgrade linux-image-6.8.0-1041-raspiUpgrade linux-image-6.14.0-1008-gcpUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-6.11.0-1018-azureUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-oracleUpgrade linux-image-ibm-6.8Upgrade linux-image-oem-22.04Upgrade linux-image-gkeop-6.8Upgrade linux-image-gkeopUpgrade linux-image-6.14.0-1007-raspiUpgrade linux-image-lowlatency-64kUpgrade linux-image-genericUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-6.8.0-1041-awsUpgrade linux-image-6.14.0-1007-oracle-64kUpgrade linux-image-6.8.0-1029-azure-nvidiaUpgrade linux-image-azure-nvidia-6.8Upgrade linux-image-ibmUpgrade linux-image-6.8.0-1044-azure-fipsUpgrade linux-image-6.14.0-1007-awsUpgrade linux-image-6.14.0-1004-realtimeUpgrade linux-image-6.11.0-1011-realtimeUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-6.8.0-86-generic-64kUpgrade linux-image-generic-lpaeUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-gcp-6.8Upgrade linux-image-azure-fdeUpgrade linux-image-6.8.0-1038-oracleUpgrade linux-image-6.8.0-1041-nvidiaUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-lowlatency-6.8Upgrade linux-image-generic-6.8Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-oem-24.04bUpgrade linux-image-6.11.0-1017-oracle-64kUpgrade linux-image-aws-64kUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-nvidiaUpgrade linux-image-6.8.0-1041-nvidia-64k | Jun 26, 2025 | Apr 16, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub