In the Linux kernel, the following vulnerability has been resolved:
ice: fix Tx scheduler error handling in XDP callback
When the XDP program is loaded, the XDP callback adds new Tx queues. This means that the callback must update the Tx scheduler with the new queue number. In the event of a Tx scheduler failure, the XDP callback should also fail and roll back any changes previously made for XDP preparation.
The previous implementation had a bug that not all changes made by the XDP callback were rolled back. This caused the crash with the following call trace:
[ +9.549584] ice 0000:ca:00.0: Failed VSI LAN queue config for XDP, error: -5 [ +0.382335] Oops: general protection fault, probably for non-canonical address 0x50a2250a90495525: 0000 [#1] SMP NOPTI [ +0.010710] CPU: 103 UID: 0 PID: 0 Comm: swapper/103 Not tainted 6.14.0-net-next-mar-31+ #14 PREEMPT(voluntary) [ +0.010175] Hardware name: Intel Corporation M50CYP2SBSTD/M50CYP2SBSTD, BIOS SE5C620.86B.01.01.0005.2202160810 02/16/2022 [ +0.010946] RIP: 0010:__ice_update_sample+0x39/0xe0 [ice]
[...]
[ +0.002715] Call Trace: [ +0.002452] <IRQ> [ +0.002021] ? __die_body.cold+0x19/0x29 [ +0.003922] ? die_addr+0x3c/0x60 [ +0.003319] ? exc_general_protection+0x17c/0x400 [ +0.004707] ? asm_exc_general_protection+0x26/0x30 [ +0.004879] ? __ice_update_sample+0x39/0xe0 [ice] [ +0.004835] ice_napi_poll+0x665/0x680 [ice] [ +0.004320] __napi_poll+0x28/0x190 [ +0.003500] net_rx_action+0x198/0x360 [ +0.003752] ? update_rq_clock+0x39/0x220 [ +0.004013] handle_softirqs+0xf1/0x340 [ +0.003840] ? sched_clock_cpu+0xf/0x1f0 [ +0.003925] __irq_exit_rcu+0xc2/0xe0 [ +0.003665] common_interrupt+0x85/0xa0 [ +0.003839] </IRQ> [ +0.002098] <TASK> [ +0.002106] asm_common_interrupt+0x26/0x40 [ +0.004184] RIP: 0010:cpuidle_enter_state+0xd3/0x690
Fix this by performing the missing unmapping of XDP queues from q_vectors and setting the XDP rings pointer back to NULL after all those queues are released. Also, add an immediate exit from the XDP callback in case of ring preparation failure.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linuxNo solution exists | Jul 4, 2025 | Jul 4, 2025 |
| Huawei Euleros 2_0_sp11 | — | Upgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade kernelUpgrade kernel-tools-libsUpgrade bpftool | Oct 14, 2025 | Sep 9, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade bpftoolUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernel | Sep 15, 2025 | Sep 9, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade python3-perfUpgrade kernel-tools-libsUpgrade kernelUpgrade bpftoolUpgrade kernel-toolsUpgrade kernel-abi-stablelists | Oct 24, 2025 | Sep 9, 2025 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jul 3, 2025 |
| Suse | — | Upgrade dtb-armUpgrade dtb-nvidiaUpgrade kernel-defaultUpgrade kernel-rt-livepatchUpgrade kernel-sourceUpgrade reiserfs-kmp-azureUpgrade dtb-amlogicUpgrade kernel-default-extraUpgrade dtb-caviumUpgrade gfs2-kmp-azureUpgrade kernel-devel-azureUpgrade dtb-rockchipUpgrade kernel-macrosUpgrade dtb-sprdUpgrade kernel-debug-vdsoUpgrade kernel-default-optionalUpgrade kernel-rt-vdsoUpgrade dtb-xilinxUpgrade kernel-devel-rtUpgrade dtb-exynosUpgrade dtb-mediatekUpgrade dtb-qcomUpgrade gfs2-kmp-rtUpgrade cluster-md-kmp-rtUpgrade kernel-develUpgrade kernel-default-vdsoUpgrade kernel-obs-qaUpgrade kernel-obs-buildUpgrade kernel-source-vanillaUpgrade kernel-rtUpgrade kernel-rt-develUpgrade kernel-default-base-rebuildUpgrade kernel-kvmsmallUpgrade kernel-azure-develUpgrade kernel-azure-optionalUpgrade kernel-azureUpgrade dlm-kmp-64kbUpgrade dtb-alteraUpgrade kselftests-kmp-64kbUpgrade kernel-rt-extraUpgrade kernel-syms-azureUpgrade ocfs2-kmp-defaultUpgrade cluster-md-kmp-64kbUpgrade ocfs2-kmp-azureUpgrade kernel-default-livepatchUpgrade kernel-64kbUpgrade dtb-amazonUpgrade kselftests-kmp-azureUpgrade kernel-source-rtUpgrade dlm-kmp-azureUpgrade kernel-64kb-extraUpgrade kernel-symsUpgrade kernel-docs-htmlUpgrade kernel-debugUpgrade ocfs2-kmp-64kbUpgrade ocfs2-kmp-rtUpgrade cluster-md-kmp-defaultUpgrade gfs2-kmp-defaultUpgrade gfs2-kmp-64kbUpgrade kernel-default-develUpgrade kernel-rt-livepatch-develUpgrade kernel-docsUpgrade dtb-socionextUpgrade kernel-zfcpdumpUpgrade dtb-renesasUpgrade reiserfs-kmp-64kbUpgrade kernel-source-azureUpgrade kernel-rt-optionalUpgrade kernel-kvmsmall-vdsoUpgrade dlm-kmp-rtUpgrade dlm-kmp-defaultUpgrade dtb-appleUpgrade kernel-debug-develUpgrade kernel-azure-extraUpgrade kernel-rt_debug-vdsoUpgrade dtb-freescaleUpgrade kernel-rt_debugUpgrade dtb-hisiliconUpgrade dtb-apmUpgrade kernel-kvmsmall-develUpgrade dtb-amdUpgrade dtb-allwinnerUpgrade kernel-64kb-develUpgrade dtb-lgUpgrade dtb-broadcomUpgrade reiserfs-kmp-defaultUpgrade kselftests-kmp-defaultUpgrade kernel-64kb-optionalUpgrade kernel-default-livepatch-develUpgrade cluster-md-kmp-azureUpgrade kernel-default-baseUpgrade kernel-syms-rtUpgrade kernel-azure-vdsoUpgrade dtb-marvellUpgrade reiserfs-kmp-rtUpgrade kselftests-kmp-rtUpgrade kernel-rt_debug-devel | Dec 5, 2025 | Aug 18, 2025 |
| Ubuntu | — | Upgrade linux-image-6.8.0-100-genericUpgrade linux-image-gcpUpgrade linux-image-raspiUpgrade linux-image-aws-64k-6.14Upgrade linux-image-6.8.0-1051-azureUpgrade linux-image-oracle-64k-6.14Upgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-gcp-64kUpgrade linux-image-raspi-realtimeUpgrade linux-image-xilinxUpgrade linux-image-nvidia-64kUpgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-azure-6.8Upgrade linux-image-raspi-realtime-6.8Upgrade linux-image-gke-64kUpgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-intel-iotgUpgrade linux-image-gke-6.8Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-gke-64k-6.8Upgrade linux-image-fips-6.8Upgrade linux-image-gcp-fipsUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-generic-6.8Upgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-aws-fips-6.8Upgrade linux-image-oracle-6.8Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-aws-64k-6.8Upgrade linux-image-oem-22.04cUpgrade linux-image-6.14.0-1012-realtimeUpgrade linux-image-6.14.0-1013-oracle-64kUpgrade linux-image-virtual-6.14Upgrade linux-image-6.8.0-1046-awsUpgrade linux-image-raspi-6.8Upgrade linux-image-virtual-6.8Upgrade linux-image-gkeopUpgrade linux-image-nvidiaUpgrade linux-image-6.14.0-1016-gcpUpgrade linux-image-aws-6.14Upgrade linux-image-azureUpgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-gcp-fips-6.8Upgrade linux-image-generic-64kUpgrade linux-image-azure-fips-6.8Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-oem-24.04cUpgrade linux-image-6.14.0-1013-aws-64kUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-realtime-hwe-22.04Upgrade linux-image-6.14.0-1013-awsUpgrade linux-image-realtime-6.14Upgrade linux-image-6.14.0-1016-gcp-64kUpgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-gcp-64k-6.14Upgrade linux-image-raspi-6.14Upgrade linux-image-aws-6.8Upgrade linux-image-nvidia-6.8Upgrade linux-image-oem-22.04dUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-kvmUpgrade linux-image-xilinx-6.8Upgrade linux-image-generic-6.14Upgrade linux-image-oem-24.04aUpgrade linux-image-gcp-6.14Upgrade linux-image-oem-24.04Upgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-6.14.0-32-generic-64kUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-genericUpgrade linux-image-realtime-6.8.1Upgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-aws-lts-24.04Upgrade linux-image-oem-22.04bUpgrade linux-image-aws-64kUpgrade linux-image-oracle-64kUpgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-generic-lpaeUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-6.14.0-1014-raspiUpgrade linux-image-gkeUpgrade linux-image-aws-fipsUpgrade linux-image-generic-64k-6.8Upgrade linux-image-oem-24.04bUpgrade linux-image-lowlatency-6.8Upgrade linux-image-realtimeUpgrade linux-image-6.14.0-1013-oracleUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-6.14.0-32-genericUpgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-6.8.0-100-fipsUpgrade linux-image-ibm-classicUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-fipsUpgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-azure-6.14Upgrade linux-image-awsUpgrade linux-image-oracle-6.14Upgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-6.8.0-1046-azureUpgrade linux-image-azure-fipsUpgrade linux-image-azure-lts-24.04Upgrade linux-image-generic-64k-6.14Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-gcp-6.8Upgrade linux-image-6.14.0-1012-azureUpgrade linux-image-oracleUpgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-oem-6.14Upgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-6.14.0-1012-oemUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-ibm-6.8Upgrade linux-image-ibmUpgrade linux-image-gkeop-6.8Upgrade linux-image-virtualUpgrade linux-image-oem-22.04aUpgrade linux-image-oem-22.04Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-lowlatency | Jul 7, 2025 | Jul 3, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub