In the Linux kernel, the following vulnerability has been resolved:
idpf: fix null-ptr-deref in idpf_features_check
idpf_features_check is used to validate the TX packet. skb header length is compared with the hardware supported value received from the device control plane. The value is stored in the adapter structure and to access it, vport pointer is used. During reset all the vports are released and the vport pointer that the netdev private structure points to is NULL.
To avoid null-ptr-deref, store the max header length value in netdev private structure. This also helps to cache the value and avoid accessing adapter pointer in hot path.
BUG: kernel NULL pointer dereference, address: 0000000000000068 ... RIP: 0010:idpf_features_check+0x6d/0xe0 [idpf] Call Trace: <TASK> ? __die+0x23/0x70 ? page_fault_oops+0x154/0x520 ? exc_page_fault+0x76/0x190 ? asm_exc_page_fault+0x26/0x30 ? idpf_features_check+0x6d/0xe0 [idpf] netif_skb_features+0x88/0x310 validate_xmit_skb+0x2a/0x2b0 validate_xmit_skb_list+0x4c/0x70 sch_direct_xmit+0x19d/0x3a0 __dev_queue_xmit+0xb74/0xe70 ...
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 23, 2026 | Jul 23, 2026 |
| Redhat_linux | — | No solution existsUpgrade kernelUpgrade kernel-rt | Jul 9, 2025 | Jun 18, 2025 |
| Rocky_linux | — | Upgrade kernel-debug-modulesUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade kernel-rt-debug-coreUpgrade kernel-rt-debug-develUpgrade kernel-cross-headersUpgrade kernel-tools-libs-develUpgrade kernel-rt-modulesUpgrade kernel-rtUpgrade kernel-debug-modules-extraUpgrade bpftool-debuginfoUpgrade kernel-debug-debuginfoUpgrade kernel-rt-debug-kvmUpgrade kernel-toolsUpgrade kernel-rt-modules-extraUpgrade kernel-rt-debuginfoUpgrade kernel-headersUpgrade python3-perfUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-debuginfoUpgrade kernel-coreUpgrade bpftoolUpgrade python3-perf-debuginfoUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-debugUpgrade kernel-debugUpgrade kernel-develUpgrade kernel-tools-libsUpgrade kernel-modulesUpgrade kernel-rt-coreUpgrade kernel-rt-debug-modulesUpgrade kernel-debug-coreUpgrade kernel-rt-develUpgrade kernel-rt-debug-debuginfoUpgrade perf-debuginfoUpgrade kernel-debug-develUpgrade kernel-modules-extraUpgrade perfUpgrade kernel-tools-debuginfoUpgrade kernel-rt-kvm | Jul 31, 2025 | Jul 29, 2025 |
| Suse | — | Upgrade dtb-qcomUpgrade kernel-default-extraUpgrade kernel-symsUpgrade kernel-default-vdsoUpgrade dtb-freescaleUpgrade kernel-default-develUpgrade dlm-kmp-64kbUpgrade kernel-macrosUpgrade dtb-apmUpgrade kernel-default-livepatchUpgrade kernel-source-azureUpgrade kselftests-kmp-defaultUpgrade gfs2-kmp-64kbUpgrade dtb-amlogicUpgrade dtb-exynosUpgrade kernel-kvmsmall-develUpgrade kernel-kvmsmallUpgrade cluster-md-kmp-defaultUpgrade kernel-azure-vdsoUpgrade kernel-rtUpgrade kselftests-kmp-64kbUpgrade kernel-default-base-rebuildUpgrade dlm-kmp-azureUpgrade dtb-amazonUpgrade kernel-sourceUpgrade dtb-broadcomUpgrade kernel-rt_debug-vdsoUpgrade kernel-syms-rtUpgrade kernel-rt-livepatch-develUpgrade dtb-armUpgrade gfs2-kmp-rtUpgrade dtb-lgUpgrade kernel-devel-rtUpgrade cluster-md-kmp-azureUpgrade kernel-obs-qaUpgrade kernel-syms-azureUpgrade kernel-azure-extraUpgrade ocfs2-kmp-rtUpgrade kernel-devel-azureUpgrade dtb-mediatekUpgrade kernel-kvmsmall-vdsoUpgrade kernel-64kbUpgrade kernel-64kb-optionalUpgrade kernel-azure-develUpgrade kernel-zfcpdumpUpgrade reiserfs-kmp-azureUpgrade kernel-obs-buildUpgrade dtb-nvidiaUpgrade dtb-hisiliconUpgrade kernel-azureUpgrade dtb-alteraUpgrade kernel-64kb-extraUpgrade kselftests-kmp-rtUpgrade dtb-rockchipUpgrade reiserfs-kmp-rtUpgrade reiserfs-kmp-64kbUpgrade kernel-develUpgrade kernel-default-optionalUpgrade kernel-source-vanillaUpgrade kernel-debug-vdsoUpgrade ocfs2-kmp-azureUpgrade kernel-default-livepatch-develUpgrade kernel-defaultUpgrade reiserfs-kmp-defaultUpgrade dtb-sprdUpgrade kernel-debug-develUpgrade gfs2-kmp-defaultUpgrade dtb-appleUpgrade dtb-xilinxUpgrade dtb-renesasUpgrade cluster-md-kmp-rtUpgrade dlm-kmp-rtUpgrade kernel-rt-develUpgrade ocfs2-kmp-defaultUpgrade kernel-source-rtUpgrade kernel-rt_debugUpgrade kernel-rt-vdsoUpgrade kernel-docs-htmlUpgrade kernel-64kb-develUpgrade kernel-debugUpgrade dtb-socionextUpgrade dtb-caviumUpgrade kernel-rt-optionalUpgrade dtb-marvellUpgrade dtb-amdUpgrade kernel-azure-optionalUpgrade dtb-allwinnerUpgrade gfs2-kmp-azureUpgrade kselftests-kmp-azureUpgrade kernel-rt_debug-develUpgrade ocfs2-kmp-64kbUpgrade cluster-md-kmp-64kbUpgrade kernel-default-baseUpgrade dlm-kmp-defaultUpgrade kernel-rt-extraUpgrade kernel-docs | Dec 5, 2025 | Jul 8, 2025 |
| Ubuntu | — | Upgrade linux-image-generic-64kUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-virtual-6.8Upgrade linux-image-oem-24.04cUpgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-azure-lts-24.04Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-6.8.0-1051-azureUpgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-aws-64k-6.8Upgrade linux-image-6.14.0-1013-aws-64kUpgrade linux-image-realtime-6.14Upgrade linux-image-xilinx-6.8Upgrade linux-image-oem-22.04dUpgrade linux-image-6.8.0-100-genericUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-lowlatency-64kUpgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-6.14.0-1013-oracleUpgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-6.8.0-1046-awsUpgrade linux-image-aws-6.14Upgrade linux-image-lowlatency-6.8Upgrade linux-image-nvidiaUpgrade linux-image-raspiUpgrade linux-image-aws-64k-6.14Upgrade linux-image-azure-fipsUpgrade linux-image-genericUpgrade linux-image-oracle-6.8Upgrade linux-image-oracle-64k-6.14Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-generic-64k-6.8Upgrade linux-image-raspi-realtime-6.8Upgrade linux-image-aws-6.8Upgrade linux-image-realtime-6.8.1Upgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-fipsUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-6.14.0-1012-azureUpgrade linux-image-raspi-6.14Upgrade linux-image-6.14.0-1013-oracle-64kUpgrade linux-image-ibmUpgrade linux-image-oracle-6.14Upgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-oem-22.04aUpgrade linux-image-oem-22.04cUpgrade linux-image-kvmUpgrade linux-image-ibm-classicUpgrade linux-image-gke-6.8Upgrade linux-image-gke-64kUpgrade linux-image-gke-64k-6.8Upgrade linux-image-gcp-fipsUpgrade linux-image-oem-22.04Upgrade linux-image-6.14.0-1012-oemUpgrade linux-image-nvidia-6.8Upgrade linux-image-gcp-6.14Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-gcp-64k-6.14Upgrade linux-image-gcp-fips-6.8Upgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-6.14.0-32-generic-64kUpgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-aws-lts-24.04Upgrade linux-image-raspi-6.8Upgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-6.14.0-1016-gcp-64kUpgrade linux-image-azureUpgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-azure-6.14Upgrade linux-image-6.14.0-1013-awsUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-ibm-6.8Upgrade linux-image-6.8.0-1046-azureUpgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-gcp-64kUpgrade linux-image-lowlatencyUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-generic-6.14Upgrade linux-image-aws-fipsUpgrade linux-image-gcp-6.8Upgrade linux-image-nvidia-64kUpgrade linux-image-oem-22.04bUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-aws-64kUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-gkeop-6.8Upgrade linux-image-fips-6.8Upgrade linux-image-awsUpgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-6.8.0-100-fipsUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.14.0-1014-raspiUpgrade linux-image-intel-iotgUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-virtualUpgrade linux-image-oem-24.04aUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-realtimeUpgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-gkeopUpgrade linux-image-aws-fips-6.8Upgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-xilinxUpgrade linux-image-realtime-hwe-22.04Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-generic-6.8Upgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-generic-lpaeUpgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-oem-6.14Upgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-6.14.0-32-genericUpgrade linux-image-raspi-realtimeUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-gcpUpgrade linux-image-azure-6.8Upgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-6.14.0-1016-gcpUpgrade linux-image-6.14.0-1012-realtimeUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-gkeUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-azure-fips-6.8Upgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-oem-24.04bUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-virtual-6.14Upgrade linux-image-generic-64k-6.14Upgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-oracleUpgrade linux-image-oracle-64kUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-oem-24.04 | Jun 26, 2025 | Jun 18, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub