In the Linux kernel, the following vulnerability has been resolved:
idpf: fix null-ptr-deref in idpf_features_check
idpf_features_check is used to validate the TX packet. skb header length is compared with the hardware supported value received from the device control plane. The value is stored in the adapter structure and to access it, vport pointer is used. During reset all the vports are released and the vport pointer that the netdev private structure points to is NULL.
To avoid null-ptr-deref, store the max header length value in netdev private structure. This also helps to cache the value and avoid accessing adapter pointer in hot path.
BUG: kernel NULL pointer dereference, address: 0000000000000068 ... RIP: 0010:idpf_features_check+0x6d/0xe0 [idpf] Call Trace: <TASK> ? __die+0x23/0x70 ? page_fault_oops+0x154/0x520 ? exc_page_fault+0x76/0x190 ? asm_exc_page_fault+0x26/0x30 ? idpf_features_check+0x6d/0xe0 [idpf] netif_skb_features+0x88/0x310 validate_xmit_skb+0x2a/0x2b0 validate_xmit_skb_list+0x4c/0x70 sch_direct_xmit+0x19d/0x3a0 __dev_queue_xmit+0xb74/0xe70 ...
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 23, 2026 | Jul 23, 2026 |
| Redhat_linux | — | Upgrade kernel-rtNo solution existsUpgrade kernel | Jul 9, 2025 | Jun 18, 2025 |
| Rocky_linux | — | Upgrade kernel-toolsUpgrade bpftool-debuginfoUpgrade kernel-cross-headersUpgrade kernel-debug-debuginfoUpgrade kernel-rt-debug-kvmUpgrade kernel-rtUpgrade kernel-headersUpgrade kernel-debug-modules-extraUpgrade kernel-rt-modules-extraUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debug-modulesUpgrade kernel-rt-debuginfoUpgrade kernel-rt-debug-coreUpgrade kernelUpgrade kernel-rt-modulesUpgrade kernel-rt-debug-develUpgrade kernel-tools-libs-develUpgrade kernel-coreUpgrade bpftoolUpgrade kernel-debuginfoUpgrade kernel-debug-coreUpgrade kernel-debug-develUpgrade kernel-rt-coreUpgrade kernel-rt-develUpgrade kernel-rt-debug-modulesUpgrade kernel-develUpgrade kernel-modules-extraUpgrade perfUpgrade python3-perfUpgrade kernel-rt-debug-debuginfoUpgrade kernel-modulesUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-rt-debug-modules-extraUpgrade python3-perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-rt-kvmUpgrade kernel-rt-debugUpgrade kernel-debugUpgrade kernel-tools-libsUpgrade perf-debuginfo | Jul 31, 2025 | Jul 29, 2025 |
| Suse | — | Upgrade kernel-azure-optionalUpgrade kernel-64kb-develUpgrade gfs2-kmp-azureUpgrade kernel-source-rtUpgrade ocfs2-kmp-defaultUpgrade kselftests-kmp-azureUpgrade cluster-md-kmp-rtUpgrade kernel-docsUpgrade ocfs2-kmp-64kbUpgrade kernel-default-baseUpgrade dtb-allwinnerUpgrade kernel-azureUpgrade kernel-docs-htmlUpgrade dtb-renesasUpgrade cluster-md-kmp-64kbUpgrade kernel-rt-extraUpgrade reiserfs-kmp-rtUpgrade dlm-kmp-rtUpgrade kernel-source-vanillaUpgrade kselftests-kmp-rtUpgrade reiserfs-kmp-64kbUpgrade kernel-obs-buildUpgrade kernel-default-optionalUpgrade kernel-develUpgrade kernel-rt_debug-develUpgrade dlm-kmp-defaultUpgrade dtb-xilinxUpgrade kernel-rt-vdsoUpgrade dtb-rockchipUpgrade kernel-64kb-extraUpgrade reiserfs-kmp-defaultUpgrade dtb-appleUpgrade gfs2-kmp-defaultUpgrade kernel-debug-develUpgrade dtb-sprdUpgrade kernel-default-livepatch-develUpgrade reiserfs-kmp-azureUpgrade kernel-defaultUpgrade ocfs2-kmp-azureUpgrade dtb-socionextUpgrade kernel-debugUpgrade dtb-caviumUpgrade kernel-rt-optionalUpgrade dtb-nvidiaUpgrade dtb-hisiliconUpgrade dtb-marvellUpgrade dtb-amdUpgrade kernel-debug-vdsoUpgrade kernel-rt_debugUpgrade kernel-rt-develUpgrade dtb-alteraUpgrade dtb-lgUpgrade kselftests-kmp-64kbUpgrade kernel-sourceUpgrade kernel-macrosUpgrade kernel-default-extraUpgrade dtb-qcomUpgrade dtb-broadcomUpgrade kernel-rtUpgrade kernel-default-base-rebuildUpgrade cluster-md-kmp-defaultUpgrade kselftests-kmp-defaultUpgrade kernel-kvmsmallUpgrade kernel-symsUpgrade kernel-default-develUpgrade kernel-zfcpdumpUpgrade kernel-kvmsmall-vdsoUpgrade kernel-azure-develUpgrade dtb-freescaleUpgrade kernel-64kb-optionalUpgrade kernel-64kbUpgrade gfs2-kmp-rtUpgrade dtb-amazonUpgrade dtb-exynosUpgrade kernel-azure-vdsoUpgrade dtb-armUpgrade kernel-default-vdsoUpgrade dlm-kmp-azureUpgrade kernel-syms-azureUpgrade kernel-obs-qaUpgrade kernel-devel-azureUpgrade dtb-mediatekUpgrade kernel-azure-extraUpgrade kernel-source-azureUpgrade dtb-amlogicUpgrade dlm-kmp-64kbUpgrade kernel-rt-livepatch-develUpgrade kernel-devel-rtUpgrade cluster-md-kmp-azureUpgrade ocfs2-kmp-rtUpgrade kernel-syms-rtUpgrade kernel-rt_debug-vdsoUpgrade kernel-default-livepatchUpgrade kernel-kvmsmall-develUpgrade gfs2-kmp-64kbUpgrade dtb-apm | Dec 5, 2025 | Jul 8, 2025 |
| Ubuntu | — | Upgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-oracleUpgrade linux-image-realtimeUpgrade linux-image-6.14.0-32-genericUpgrade linux-image-virtualUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-6.14.0-1014-raspiUpgrade linux-image-6.8.0-100-fipsUpgrade linux-image-fips-6.8Upgrade linux-image-virtual-6.14Upgrade linux-image-aws-64kUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-gkeUpgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-azure-fips-6.8Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-raspi-realtimeUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-intel-iotgUpgrade linux-image-nvidia-64kUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-awsUpgrade linux-image-oem-6.14Upgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-6.14.0-1012-realtimeUpgrade linux-image-oem-24.04Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-oem-22.04bUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-gcp-6.8Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-gkeop-6.8Upgrade linux-image-6.14.0-1016-gcpUpgrade linux-image-generic-64k-6.14Upgrade linux-image-generic-6.8Upgrade linux-image-generic-lpaeUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-gcpUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-oracle-64kUpgrade linux-image-xilinxUpgrade linux-image-realtime-hwe-22.04Upgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-oem-24.04aUpgrade linux-image-azure-6.8Upgrade linux-image-gkeopUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-aws-fips-6.8Upgrade linux-image-oem-24.04bUpgrade linux-image-ibm-classicUpgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-6.14.0-1013-oracleUpgrade linux-image-gcp-fipsUpgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-6.14.0-1013-oracle-64kUpgrade linux-image-gcp-64k-6.14Upgrade linux-image-oem-22.04cUpgrade linux-image-oem-22.04aUpgrade linux-image-gke-64k-6.8Upgrade linux-image-gke-6.8Upgrade linux-image-gke-64kUpgrade linux-image-generic-64k-6.8Upgrade linux-image-nvidiaUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-gcp-64kUpgrade linux-image-azureUpgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-6.14.0-32-generic-64kUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-nvidia-6.8Upgrade linux-image-generic-6.14Upgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-6.14.0-1013-aws-64kUpgrade linux-image-oem-24.04cUpgrade linux-image-ibm-6.8Upgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-oracle-64k-6.8Upgrade linux-image-lowlatencyUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-6.14.0-1013-awsUpgrade linux-image-generic-64kUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-lowlatency-6.8Upgrade linux-image-genericUpgrade linux-image-azure-fipsUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-realtime-6.8.1Upgrade linux-image-raspi-realtime-6.8Upgrade linux-image-raspiUpgrade linux-image-oracle-6.8Upgrade linux-image-aws-fipsUpgrade linux-image-virtual-6.8Upgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-6.14.0-1016-gcp-64kUpgrade linux-image-fipsUpgrade linux-image-aws-6.8Upgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-gcp-fips-6.8Upgrade linux-image-6.14.0-1012-oemUpgrade linux-image-6.14.0-1012-azureUpgrade linux-image-raspi-6.14Upgrade linux-image-oracle-6.14Upgrade linux-image-ibmUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-oem-22.04Upgrade linux-image-aws-lts-24.04Upgrade linux-image-azure-6.14Upgrade linux-image-raspi-6.8Upgrade linux-image-6.8.0-1046-azureUpgrade linux-image-oem-22.04dUpgrade linux-image-lowlatency-64kUpgrade linux-image-azure-lts-24.04Upgrade linux-image-6.8.0-1051-azureUpgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-xilinx-6.8Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.8.0-100-genericUpgrade linux-image-aws-64k-6.8Upgrade linux-image-realtime-6.14Upgrade linux-image-oracle-64k-6.14Upgrade linux-image-aws-64k-6.14Upgrade linux-image-aws-6.14Upgrade linux-image-6.8.0-1046-awsUpgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-gcp-6.14Upgrade linux-image-kvm | Jun 26, 2025 | Jun 18, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub