In the Linux kernel, the following vulnerability has been resolved:
ice: fix Tx scheduler error handling in XDP callback
When the XDP program is loaded, the XDP callback adds new Tx queues. This means that the callback must update the Tx scheduler with the new queue number. In the event of a Tx scheduler failure, the XDP callback should also fail and roll back any changes previously made for XDP preparation.
The previous implementation had a bug that not all changes made by the XDP callback were rolled back. This caused the crash with the following call trace:
[ +9.549584] ice 0000:ca:00.0: Failed VSI LAN queue config for XDP, error: -5 [ +0.382335] Oops: general protection fault, probably for non-canonical address 0x50a2250a90495525: 0000 [#1] SMP NOPTI [ +0.010710] CPU: 103 UID: 0 PID: 0 Comm: swapper/103 Not tainted 6.14.0-net-next-mar-31+ #14 PREEMPT(voluntary) [ +0.010175] Hardware name: Intel Corporation M50CYP2SBSTD/M50CYP2SBSTD, BIOS SE5C620.86B.01.01.0005.2202160810 02/16/2022 [ +0.010946] RIP: 0010:__ice_update_sample+0x39/0xe0 [ice]
[...]
[ +0.002715] Call Trace: [ +0.002452] <IRQ> [ +0.002021] ? __die_body.cold+0x19/0x29 [ +0.003922] ? die_addr+0x3c/0x60 [ +0.003319] ? exc_general_protection+0x17c/0x400 [ +0.004707] ? asm_exc_general_protection+0x26/0x30 [ +0.004879] ? __ice_update_sample+0x39/0xe0 [ice] [ +0.004835] ice_napi_poll+0x665/0x680 [ice] [ +0.004320] __napi_poll+0x28/0x190 [ +0.003500] net_rx_action+0x198/0x360 [ +0.003752] ? update_rq_clock+0x39/0x220 [ +0.004013] handle_softirqs+0xf1/0x340 [ +0.003840] ? sched_clock_cpu+0xf/0x1f0 [ +0.003925] __irq_exit_rcu+0xc2/0xe0 [ +0.003665] common_interrupt+0x85/0xa0 [ +0.003839] </IRQ> [ +0.002098] <TASK> [ +0.002106] asm_common_interrupt+0x26/0x40 [ +0.004184] RIP: 0010:cpuidle_enter_state+0xd3/0x690
Fix this by performing the missing unmapping of XDP queues from q_vectors and setting the XDP rings pointer back to NULL after all those queues are released. Also, add an immediate exit from the XDP callback in case of ring preparation failure.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | No solution existsUpgrade linux | Jul 4, 2025 | Jul 4, 2025 |
| Huawei Euleros 2_0_sp11 | — | Upgrade bpftoolUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade python3-perf | Oct 14, 2025 | Sep 9, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade bpftoolUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-tools | Sep 15, 2025 | Sep 9, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade bpftoolUpgrade kernel-tools-libsUpgrade kernelUpgrade python3-perf | Oct 24, 2025 | Sep 9, 2025 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jul 3, 2025 |
| Suse | — | Upgrade dtb-socionextUpgrade kernel-default-develUpgrade kernel-zfcpdumpUpgrade kernel-docsUpgrade kernel-default-livepatch-develUpgrade kernel-docs-htmlUpgrade dtb-amazonUpgrade kernel-default-livepatchUpgrade cluster-md-kmp-defaultUpgrade kernel-debug-develUpgrade kernel-rt-livepatch-develUpgrade cluster-md-kmp-azureUpgrade kernel-64kb-develUpgrade reiserfs-kmp-defaultUpgrade dtb-lgUpgrade kernel-rt_debug-develUpgrade ocfs2-kmp-azureUpgrade kernel-64kbUpgrade dtb-broadcomUpgrade ocfs2-kmp-64kbUpgrade kernel-azure-extraUpgrade kernel-azure-vdsoUpgrade kernel-64kb-optionalUpgrade dtb-amdUpgrade kernel-64kb-extraUpgrade dtb-allwinnerUpgrade kernel-kvmsmall-develUpgrade kselftests-kmp-defaultUpgrade kernel-rt_debug-vdsoUpgrade dlm-kmp-azureUpgrade gfs2-kmp-64kbUpgrade gfs2-kmp-defaultUpgrade dtb-renesasUpgrade kernel-kvmsmall-vdsoUpgrade dlm-kmp-defaultUpgrade dlm-kmp-rtUpgrade kernel-rt-optionalUpgrade kernel-source-rtUpgrade dtb-apmUpgrade dtb-freescaleUpgrade dtb-hisiliconUpgrade dtb-marvellUpgrade ocfs2-kmp-rtUpgrade kernel-rt_debugUpgrade kernel-source-azureUpgrade kernel-symsUpgrade kernel-syms-rtUpgrade kernel-default-baseUpgrade reiserfs-kmp-rtUpgrade kernel-debugUpgrade dtb-appleUpgrade reiserfs-kmp-64kbUpgrade kselftests-kmp-azureUpgrade kselftests-kmp-rtUpgrade kernel-syms-azureUpgrade kernel-source-vanillaUpgrade kernel-obs-buildUpgrade cluster-md-kmp-64kbUpgrade ocfs2-kmp-defaultUpgrade kernel-rt-vdsoUpgrade kernel-rtUpgrade kernel-rt-livepatchUpgrade dtb-nvidiaUpgrade reiserfs-kmp-azureUpgrade kernel-sourceUpgrade dtb-armUpgrade dtb-amlogicUpgrade dtb-exynosUpgrade kernel-devel-rtUpgrade kernel-default-optionalUpgrade dtb-sprdUpgrade kernel-debug-vdsoUpgrade kernel-default-extraUpgrade kernel-defaultUpgrade kernel-azure-develUpgrade gfs2-kmp-rtUpgrade dtb-caviumUpgrade kernel-azure-optionalUpgrade kernel-rt-extraUpgrade kselftests-kmp-64kbUpgrade kernel-macrosUpgrade kernel-devel-azureUpgrade gfs2-kmp-azureUpgrade dtb-rockchipUpgrade dtb-mediatekUpgrade dtb-xilinxUpgrade kernel-default-base-rebuildUpgrade dtb-qcomUpgrade kernel-default-vdsoUpgrade dtb-alteraUpgrade kernel-develUpgrade dlm-kmp-64kbUpgrade cluster-md-kmp-rtUpgrade kernel-obs-qaUpgrade kernel-kvmsmallUpgrade kernel-azureUpgrade kernel-rt-devel | Dec 5, 2025 | Aug 18, 2025 |
| Ubuntu | — | Upgrade linux-image-6.14.0-1013-oracle-64kUpgrade linux-image-fips-6.8Upgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-gke-64k-6.8Upgrade linux-image-oracle-64k-6.8Upgrade linux-image-raspiUpgrade linux-image-oracle-64k-6.14Upgrade linux-image-6.14.0-1012-realtimeUpgrade linux-image-generic-6.8Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-generic-64kUpgrade linux-image-xilinxUpgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-aws-64k-6.14Upgrade linux-image-oem-24.04aUpgrade linux-image-raspi-realtimeUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-6.8.0-1051-azureUpgrade linux-image-gcp-64kUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-intel-iotgUpgrade linux-image-aws-64k-6.8Upgrade linux-image-oem-24.04Upgrade linux-image-realtime-6.8.1Upgrade linux-image-realtime-hwe-24.04Upgrade linux-image-kvmUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-nvidia-64kUpgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-azure-6.8Upgrade linux-image-gke-64kUpgrade linux-image-oem-22.04cUpgrade linux-image-gkeopUpgrade linux-image-nvidiaUpgrade linux-image-gcpUpgrade linux-image-virtual-6.8Upgrade linux-image-aws-fips-6.8Upgrade linux-image-azureUpgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-raspi-6.8Upgrade linux-image-generic-6.14Upgrade linux-image-6.8.0-100-genericUpgrade linux-image-oem-22.04dUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-genericUpgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-gke-6.8Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.14.0-32-generic-64kUpgrade linux-image-nvidia-6.8Upgrade linux-image-aws-6.14Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-gcp-fipsUpgrade linux-image-xilinx-6.8Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-6.14.0-1013-awsUpgrade linux-image-6.14.0-1013-aws-64kUpgrade linux-image-raspi-6.14Upgrade linux-image-oem-24.04cUpgrade linux-image-azure-fips-6.8Upgrade linux-image-gcp-fips-6.8Upgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-oem-22.04bUpgrade linux-image-6.14.0-1016-gcp-64kUpgrade linux-image-6.14.0-1016-gcpUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-aws-lts-24.04Upgrade linux-image-gcp-6.14Upgrade linux-image-virtual-6.14Upgrade linux-image-gcp-64k-6.14Upgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-aws-64kUpgrade linux-image-oracle-6.8Upgrade linux-image-6.8.0-1046-awsUpgrade linux-image-aws-6.8Upgrade linux-image-realtime-6.14Upgrade linux-image-realtime-hwe-22.04Upgrade linux-image-oracle-64kUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-aws-fipsUpgrade linux-image-6.14.0-1012-azureUpgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-6.14.0-1012-oemUpgrade linux-image-oem-6.14Upgrade linux-image-lowlatency-64kUpgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-awsUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-fipsUpgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-ibm-6.8Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-gcp-6.8Upgrade linux-image-lowlatency-6.8Upgrade linux-image-oracleUpgrade linux-image-oracle-6.14Upgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-lowlatencyUpgrade linux-image-ibmUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-gkeop-6.8Upgrade linux-image-realtimeUpgrade linux-image-virtualUpgrade linux-image-azure-6.14Upgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-generic-64k-6.8Upgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-oem-24.04bUpgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-6.14.0-32-genericUpgrade linux-image-6.8.0-100-fipsUpgrade linux-image-ibm-classicUpgrade linux-image-6.14.0-1014-raspiUpgrade linux-image-generic-lpaeUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-azure-lts-24.04Upgrade linux-image-azure-fipsUpgrade linux-image-generic-64k-6.14Upgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-oem-22.04Upgrade linux-image-oem-22.04aUpgrade linux-image-gkeUpgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-6.14.0-1013-oracleUpgrade linux-image-6.8.0-1046-azure | Jul 7, 2025 | Jul 3, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub