The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
In the Linux kernel, the following vulnerability has been resolved:
ice: fix Tx scheduler error handling in XDP callback
When the XDP program is loaded, the XDP callback adds new Tx queues. This means that the callback must update the Tx scheduler with the new queue number. In the event of a Tx scheduler failure, the XDP callback should also fail and roll back any changes previously made for XDP preparation.
The previous implementation had a bug that not all changes made by the XDP callback were rolled back. This caused the crash with the following call trace:
[ +9.549584] ice 0000:ca:00.0: Failed VSI LAN queue config for XDP, error: -5 [ +0.382335] Oops: general protection fault, probably for non-canonical address 0x50a2250a90495525: 0000 [#1] SMP NOPTI [ +0.010710] CPU: 103 UID: 0 PID: 0 Comm: swapper/103 Not tainted 6.14.0-net-next-mar-31+ #14 PREEMPT(voluntary) [ +0.010175] Hardware name: Intel Corporation M50CYP2SBSTD/M50CYP2SBSTD, BIOS SE5C620.86B.01.01.0005.2202160810 02/16/2022 [ +0.010946] RIP: 0010:__ice_update_sample+0x39/0xe0 [ice]
[...]
[ +0.002715] Call Trace: [ +0.002452] <IRQ> [ +0.002021] ? __die_body.cold+0x19/0x29 [ +0.003922] ? die_addr+0x3c/0x60 [ +0.003319] ? exc_general_protection+0x17c/0x400 [ +0.004707] ? asm_exc_general_protection+0x26/0x30 [ +0.004879] ? __ice_update_sample+0x39/0xe0 [ice] [ +0.004835] ice_napi_poll+0x665/0x680 [ice] [ +0.004320] __napi_poll+0x28/0x190 [ +0.003500] net_rx_action+0x198/0x360 [ +0.003752] ? update_rq_clock+0x39/0x220 [ +0.004013] handle_softirqs+0xf1/0x340 [ +0.003840] ? sched_clock_cpu+0xf/0x1f0 [ +0.003925] __irq_exit_rcu+0xc2/0xe0 [ +0.003665] common_interrupt+0x85/0xa0 [ +0.003839] </IRQ> [ +0.002098] <TASK> [ +0.002106] asm_common_interrupt+0x26/0x40 [ +0.004184] RIP: 0010:cpuidle_enter_state+0xd3/0x690
Fix this by performing the missing unmapping of XDP queues from q_vectors and setting the XDP rings pointer back to NULL after all those queues are released. Also, add an immediate exit from the XDP callback in case of ring preparation failure.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 4, 2025 | Jul 4, 2025 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-toolsUpgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade kernelUpgrade bpftool | Oct 14, 2025 | Sep 9, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade bpftoolUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernelUpgrade kernel-abi-stablelistsUpgrade python3-perf | Sep 15, 2025 | Sep 9, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade kernelUpgrade bpftoolUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel-toolsUpgrade kernel-abi-stablelists | Oct 24, 2025 | Sep 9, 2025 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jul 3, 2025 |
| Suse | — | Upgrade kernel-defaultUpgrade kernel-kvmsmallUpgrade cluster-md-kmp-rtUpgrade kernel-develUpgrade kernel-default-extraUpgrade dlm-kmp-64kbUpgrade dtb-alteraUpgrade kernel-default-vdsoUpgrade dtb-rockchipUpgrade dtb-exynosUpgrade dtb-sprdUpgrade kernel-devel-rtUpgrade kernel-debug-vdsoUpgrade kernel-obs-buildUpgrade kernel-default-optionalUpgrade kernel-obs-qaUpgrade dtb-xilinxUpgrade reiserfs-kmp-azureUpgrade kernel-syms-azureUpgrade kernel-sourceUpgrade kernel-rt-extraUpgrade kernel-rtUpgrade kernel-rt-develUpgrade dtb-qcomUpgrade ocfs2-kmp-defaultUpgrade dtb-armUpgrade dtb-nvidiaUpgrade dtb-amlogicUpgrade kernel-azureUpgrade kernel-rt-livepatchUpgrade kernel-default-base-rebuildUpgrade cluster-md-kmp-64kbUpgrade dtb-caviumUpgrade dtb-mediatekUpgrade kernel-devel-azureUpgrade kernel-macrosUpgrade gfs2-kmp-azureUpgrade kernel-rt-vdsoUpgrade kselftests-kmp-64kbUpgrade gfs2-kmp-rtUpgrade kernel-source-vanillaUpgrade kernel-azure-develUpgrade kernel-azure-optionalUpgrade cluster-md-kmp-azureUpgrade kernel-default-baseUpgrade kernel-debugUpgrade kernel-rt-optionalUpgrade kernel-azure-vdsoUpgrade kernel-default-livepatch-develUpgrade reiserfs-kmp-rtUpgrade ocfs2-kmp-rtUpgrade kernel-syms-rtUpgrade kernel-symsUpgrade dtb-marvellUpgrade dtb-appleUpgrade kernel-source-azureUpgrade kernel-kvmsmall-develUpgrade dtb-amdUpgrade dtb-allwinnerUpgrade dlm-kmp-azureUpgrade kernel-rt_debug-vdsoUpgrade kernel-64kb-extraUpgrade kselftests-kmp-defaultUpgrade kernel-source-rtUpgrade kernel-rt_debugUpgrade dtb-hisiliconUpgrade dtb-apmUpgrade dtb-freescaleUpgrade kernel-debug-develUpgrade cluster-md-kmp-defaultUpgrade kernel-rt_debug-develUpgrade kernel-docs-htmlUpgrade kernel-default-livepatchUpgrade kernel-azure-extraUpgrade kernel-64kbUpgrade dtb-amazonUpgrade ocfs2-kmp-64kbUpgrade dlm-kmp-rtUpgrade gfs2-kmp-64kbUpgrade dtb-renesasUpgrade dlm-kmp-defaultUpgrade reiserfs-kmp-64kbUpgrade kernel-kvmsmall-vdsoUpgrade gfs2-kmp-defaultUpgrade dtb-socionextUpgrade kernel-zfcpdumpUpgrade kernel-rt-livepatch-develUpgrade ocfs2-kmp-azureUpgrade dtb-broadcomUpgrade kernel-docsUpgrade kernel-default-develUpgrade reiserfs-kmp-defaultUpgrade kernel-64kb-develUpgrade dtb-lgUpgrade kselftests-kmp-azureUpgrade kselftests-kmp-rtUpgrade kernel-64kb-optional | Dec 5, 2025 | Aug 18, 2025 |
| Ubuntu | — | Upgrade linux-image-oem-6.14Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-6.14.0-1012-oemUpgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-lowlatency-64kUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-oem-24.04bUpgrade linux-image-azure-fipsUpgrade linux-image-azure-lts-24.04Upgrade linux-image-generic-lpaeUpgrade linux-image-generic-64k-6.8Upgrade linux-image-6.8.0-1046-azureUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-ibm-classicUpgrade linux-image-6.14.0-32-genericUpgrade linux-image-oem-22.04aUpgrade linux-image-oem-22.04Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-lowlatencyUpgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-gkeop-6.8Upgrade linux-image-virtualUpgrade linux-image-6.14.0-1013-oracleUpgrade linux-image-ibm-6.8Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-fipsUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-realtimeUpgrade linux-image-awsUpgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-generic-64k-6.14Upgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-oracle-6.14Upgrade linux-image-6.14.0-1012-azureUpgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-aws-fipsUpgrade linux-image-gcp-6.8Upgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-azure-6.14Upgrade linux-image-lowlatency-6.8Upgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-ibmUpgrade linux-image-gkeUpgrade linux-image-6.8.0-100-fipsUpgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-6.14.0-1014-raspiUpgrade linux-image-oracleUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-azure-6.8Upgrade linux-image-nvidia-64kUpgrade linux-image-gke-64kUpgrade linux-image-kvmUpgrade linux-image-virtual-6.8Upgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-realtime-hwe-24.04Upgrade linux-image-oem-22.04dUpgrade linux-image-genericUpgrade linux-image-nvidia-6.8Upgrade linux-image-gcp-64k-6.8Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.14.0-32-generic-64kUpgrade linux-image-nvidiaUpgrade linux-image-generic-6.14Upgrade linux-image-gkeopUpgrade linux-image-gcpUpgrade linux-image-raspi-6.8Upgrade linux-image-aws-fips-6.8Upgrade linux-image-aws-6.14Upgrade linux-image-oem-22.04bUpgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-6.8.0-100-genericUpgrade linux-image-gcp-fips-6.8Upgrade linux-image-generic-64kUpgrade linux-image-azure-fips-6.8Upgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-6.8.0-1051-azureUpgrade linux-image-generic-6.8Upgrade linux-image-raspiUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-oem-24.04aUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-aws-64k-6.8Upgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-oracle-64k-6.14Upgrade linux-image-gcp-64kUpgrade linux-image-aws-64k-6.14Upgrade linux-image-oracle-64k-6.8Upgrade linux-image-intel-iotgUpgrade linux-image-xilinxUpgrade linux-image-raspi-realtimeUpgrade linux-image-realtime-6.8.1Upgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-oem-24.04Upgrade linux-image-xilinx-6.8Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-aws-64kUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-gke-6.8Upgrade linux-image-6.14.0-1012-realtimeUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-oracle-6.8Upgrade linux-image-6.14.0-1016-gcp-64kUpgrade linux-image-6.14.0-1013-awsUpgrade linux-image-aws-6.8Upgrade linux-image-oem-24.04cUpgrade linux-image-gcp-64k-6.14Upgrade linux-image-aws-lts-24.04Upgrade linux-image-gcp-6.14Upgrade linux-image-6.8.0-1046-awsUpgrade linux-image-realtime-6.14Upgrade linux-image-virtual-6.14Upgrade linux-image-realtime-hwe-22.04Upgrade linux-image-gcp-fipsUpgrade linux-image-raspi-6.14Upgrade linux-image-oracle-64kUpgrade linux-image-oem-22.04cUpgrade linux-image-fips-6.8Upgrade linux-image-6.14.0-1013-oracle-64kUpgrade linux-image-gke-64k-6.8Upgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-6.14.0-1016-gcpUpgrade linux-image-azureUpgrade linux-image-6.14.0-1013-aws-64kUpgrade linux-image-oracle-64k-lts-24.04 | Jul 7, 2025 | Jul 3, 2025 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub