In the Linux kernel, the following vulnerability has been resolved:
idpf: fix adapter NULL pointer dereference on reboot
With SRIOV enabled, idpf ends up calling into idpf_remove() twice. First via idpf_shutdown() and then again when idpf_remove() calls into sriov_disable(), because the VF devices use the idpf driver, hence the same remove routine. When that happens, it is possible for the adapter to be NULL from the first call to idpf_remove(), leading to a NULL pointer dereference.
echo 1 > /sys/class/net/<netif>/device/sriov_numvfs reboot
BUG: kernel NULL pointer dereference, address: 0000000000000020 ... RIP: 0010:idpf_remove+0x22/0x1f0 [idpf] ... ? idpf_remove+0x22/0x1f0 [idpf] ? idpf_remove+0x1e4/0x1f0 [idpf] pci_device_remove+0x3f/0xb0 device_release_driver_internal+0x19f/0x200 pci_stop_bus_device+0x6d/0x90 pci_stop_and_remove_bus_device+0x12/0x20 pci_iov_remove_virtfn+0xbe/0x120 sriov_disable+0x34/0xe0 idpf_sriov_configure+0x58/0x140 [idpf] idpf_remove+0x1b9/0x1f0 [idpf] idpf_shutdown+0x12/0x30 [idpf] pci_device_shutdown+0x35/0x60 device_shutdown+0x156/0x200 ...
Replace the direct idpf_remove() call in idpf_shutdown() with idpf_vc_core_deinit() and idpf_deinit_dflt_mbx(), which perform the bulk of the cleanup, such as stopping the init task, freeing IRQs, destroying the vports and freeing the mailbox. This avoids the calls to sriov_disable() in addition to a small netdev cleanup, and destroying workqueues, which don't seem to be required on shutdown.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 23, 2026 | Jul 23, 2026 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Apr 16, 2025 |
| Suse | — | Upgrade gfs2-kmp-defaultUpgrade kernel-azureUpgrade kernel-debug-vdsoUpgrade dtb-armUpgrade gfs2-kmp-azureUpgrade kernel-docsUpgrade reiserfs-kmp-azureUpgrade dlm-kmp-azureUpgrade kernel-syms-azureUpgrade cluster-md-kmp-64kbUpgrade dtb-amlogicUpgrade dlm-kmp-rtUpgrade kernel-rt_debug-vdsoUpgrade kernel-64kb-extraUpgrade kernel-azure-vdsoUpgrade dtb-nvidiaUpgrade kernel-default-vdsoUpgrade kselftests-kmp-rtUpgrade kernel-obs-buildUpgrade kselftests-kmp-azureUpgrade kernel-default-base-rebuildUpgrade kernel-syms-rtUpgrade kernel-rt-extraUpgrade kernel-rtUpgrade kernel-rt-optionalUpgrade dtb-rockchipUpgrade kernel-rt-livepatch-develUpgrade kernel-rt_debug-develUpgrade kselftests-kmp-defaultUpgrade kernel-azure-develUpgrade kernel-kvmsmall-vdsoUpgrade kernel-defaultUpgrade kernel-source-vanillaUpgrade reiserfs-kmp-64kbUpgrade kernel-rt-vdsoUpgrade dtb-qcomUpgrade dtb-sprdUpgrade dtb-caviumUpgrade kernel-source-rtUpgrade kernel-default-optionalUpgrade kernel-default-develUpgrade dtb-allwinnerUpgrade dtb-mediatekUpgrade dtb-exynosUpgrade cluster-md-kmp-azureUpgrade ocfs2-kmp-64kbUpgrade kernel-source-azureUpgrade kernel-develUpgrade kernel-devel-azureUpgrade kernel-obs-qaUpgrade kernel-devel-rtUpgrade ocfs2-kmp-rtUpgrade dtb-lgUpgrade ocfs2-kmp-defaultUpgrade kernel-symsUpgrade kernel-azure-extraUpgrade gfs2-kmp-64kbUpgrade dtb-hisiliconUpgrade kernel-64kb-optionalUpgrade kernel-azure-optionalUpgrade kselftests-kmp-64kbUpgrade kernel-sourceUpgrade kernel-64kb-develUpgrade dtb-appleUpgrade dlm-kmp-defaultUpgrade cluster-md-kmp-defaultUpgrade dlm-kmp-64kbUpgrade kernel-default-livepatchUpgrade reiserfs-kmp-defaultUpgrade kernel-zfcpdumpUpgrade gfs2-kmp-rtUpgrade kernel-debug-develUpgrade dtb-renesasUpgrade kernel-rt-develUpgrade kernel-kvmsmallUpgrade kernel-default-livepatch-develUpgrade kernel-default-baseUpgrade kernel-macrosUpgrade dtb-amdUpgrade dtb-apmUpgrade reiserfs-kmp-rtUpgrade kernel-default-extraUpgrade dtb-broadcomUpgrade dtb-amazonUpgrade dtb-alteraUpgrade cluster-md-kmp-rtUpgrade kernel-debugUpgrade kernel-64kbUpgrade dtb-xilinxUpgrade dtb-marvellUpgrade dtb-freescaleUpgrade kernel-docs-htmlUpgrade ocfs2-kmp-azureUpgrade kernel-rt_debugUpgrade kernel-kvmsmall-develUpgrade dtb-socionext | Dec 5, 2025 | May 21, 2025 |
| Ubuntu | — | Upgrade linux-image-generic-6.8Upgrade linux-image-lowlatency-6.8Upgrade linux-image-6.11.0-1017-oracle-64kUpgrade linux-image-genericUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-azure-6.11Upgrade linux-image-ibm-6.8Upgrade linux-image-6.11.0-1015-awsUpgrade linux-image-gkeopUpgrade linux-image-oem-24.04bUpgrade linux-image-6.8.0-1041-raspiUpgrade linux-image-azure-fde-edgeUpgrade linux-image-6.8.0-1038-gke-64kUpgrade linux-image-generic-64kUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-6.14.0-1008-gcpUpgrade linux-image-oracleUpgrade linux-image-lowlatencyUpgrade linux-image-lowlatency-64kUpgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-oracle-64k-6.8Upgrade linux-image-6.8.0-86-lowlatencyUpgrade linux-image-aws-64kUpgrade linux-image-6.14.0-1007-awsUpgrade linux-image-6.8.0-1044-azure-fipsUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-6.11.0-1011-realtimeUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-6.14.0-1004-realtimeUpgrade linux-image-6.8.0-86-generic-64kUpgrade linux-image-6.14.0-22-generic-64kUpgrade linux-image-generic-lpaeUpgrade linux-image-6.11.0-1015-lowlatencyUpgrade linux-image-6.11.0-28-genericUpgrade linux-image-gcp-6.8Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-azure-fdeUpgrade linux-image-oem-22.04Upgrade linux-image-ibm-classicUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-azure-nvidia-6.8Upgrade linux-image-6.14.0-1007-oracle-64kUpgrade linux-image-6.8.0-1029-azure-nvidiaUpgrade linux-image-6.8.0-1041-awsUpgrade linux-image-6.8.0-1041-nvidiaUpgrade linux-image-azure-lts-24.04Upgrade linux-image-gkeop-6.8Upgrade linux-image-6.11.0-1018-azureUpgrade linux-image-virtualUpgrade linux-image-6.8.0-1038-oracleUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-ibmUpgrade linux-image-oem-22.04aUpgrade linux-image-6.8.0-1041-nvidia-64kUpgrade linux-image-6.8.0-86-genericUpgrade linux-image-nvidiaUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-6.14.0-1007-raspiUpgrade linux-image-raspi-6.8Upgrade linux-image-oracle-64kUpgrade linux-image-azure-nvidia-lts-24.04Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-virtual-6.8Upgrade linux-image-gcp-64kUpgrade linux-image-oem-22.04bUpgrade linux-image-azure-fde-6.11Upgrade linux-image-aws-lts-24.04Upgrade linux-image-6.11.0-1014-raspiUpgrade linux-image-raspiUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-gkeUpgrade linux-image-6.11.0-1016-gcp-64kUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.8.0-1041-nvidia-lowlatency-64kUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-gcpUpgrade linux-image-aws-64k-6.8Upgrade linux-image-6.8.0-1042-gcp-64kUpgrade linux-image-6.8.0-1041-azureUpgrade linux-image-6.8.0-1041-aws-64kUpgrade linux-image-6.14.0-22-genericUpgrade linux-image-6.14.0-1007-azureUpgrade linux-image-realtime-6.8.1Upgrade linux-image-nvidia-64kUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-awsUpgrade linux-image-generic-64k-6.8Upgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-6.14.0-1007-aws-64kUpgrade linux-image-6.14.0-1007-oracleUpgrade linux-image-6.8.0-1038-oracle-64kUpgrade linux-image-oracle-6.8Upgrade linux-image-azure-6.8Upgrade linux-image-nvidia-6.8Upgrade linux-image-gke-64k-6.8Upgrade linux-image-realtimeUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-gke-64kUpgrade linux-image-6.14.0-1007-azure-fdeUpgrade linux-image-6.8.0-1038-gkeUpgrade linux-image-azureUpgrade linux-image-6.8.0-1042-gcpUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-6.8.0-1041-nvidia-lowlatencyUpgrade linux-image-6.11.0-1024-oemUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-lowlatency-64k-6.11Upgrade linux-image-kvmUpgrade linux-image-6.8.0-1025-gkeopUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-6.8.0-2032-raspi-realtimeUpgrade linux-image-aws-6.8Upgrade linux-image-6.8.0-86-lowlatency-64kUpgrade linux-image-6.14.0-1008-gcp-64kUpgrade linux-image-6.11.0-1017-oracleUpgrade linux-image-raspi-realtimeUpgrade linux-image-oem-22.04dUpgrade linux-image-gke-6.8Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-gcp-64k-6.8Upgrade linux-image-oem-22.04cUpgrade linux-image-6.11.0-1018-azure-fdeUpgrade linux-image-realtime-hwe-22.04Upgrade linux-image-lowlatency-6.11Upgrade linux-image-6.8.1-1036-realtimeUpgrade linux-image-6.11.0-1016-gcpUpgrade linux-image-6.11.0-1015-lowlatency-64kUpgrade linux-image-azure-fipsUpgrade linux-image-6.11.0-28-generic-64kUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.8.0-1039-ibmUpgrade linux-image-azure-fips-6.8 | Jun 26, 2025 | Apr 16, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub