In the Linux kernel, the following vulnerability has been resolved:
ice: fix Tx scheduler error handling in XDP callback
When the XDP program is loaded, the XDP callback adds new Tx queues. This means that the callback must update the Tx scheduler with the new queue number. In the event of a Tx scheduler failure, the XDP callback should also fail and roll back any changes previously made for XDP preparation.
The previous implementation had a bug that not all changes made by the XDP callback were rolled back. This caused the crash with the following call trace:
[ +9.549584] ice 0000:ca:00.0: Failed VSI LAN queue config for XDP, error: -5 [ +0.382335] Oops: general protection fault, probably for non-canonical address 0x50a2250a90495525: 0000 [#1] SMP NOPTI [ +0.010710] CPU: 103 UID: 0 PID: 0 Comm: swapper/103 Not tainted 6.14.0-net-next-mar-31+ #14 PREEMPT(voluntary) [ +0.010175] Hardware name: Intel Corporation M50CYP2SBSTD/M50CYP2SBSTD, BIOS SE5C620.86B.01.01.0005.2202160810 02/16/2022 [ +0.010946] RIP: 0010:__ice_update_sample+0x39/0xe0 [ice]
[...]
[ +0.002715] Call Trace: [ +0.002452] <IRQ> [ +0.002021] ? __die_body.cold+0x19/0x29 [ +0.003922] ? die_addr+0x3c/0x60 [ +0.003319] ? exc_general_protection+0x17c/0x400 [ +0.004707] ? asm_exc_general_protection+0x26/0x30 [ +0.004879] ? __ice_update_sample+0x39/0xe0 [ice] [ +0.004835] ice_napi_poll+0x665/0x680 [ice] [ +0.004320] __napi_poll+0x28/0x190 [ +0.003500] net_rx_action+0x198/0x360 [ +0.003752] ? update_rq_clock+0x39/0x220 [ +0.004013] handle_softirqs+0xf1/0x340 [ +0.003840] ? sched_clock_cpu+0xf/0x1f0 [ +0.003925] __irq_exit_rcu+0xc2/0xe0 [ +0.003665] common_interrupt+0x85/0xa0 [ +0.003839] </IRQ> [ +0.002098] <TASK> [ +0.002106] asm_common_interrupt+0x26/0x40 [ +0.004184] RIP: 0010:cpuidle_enter_state+0xd3/0x690
Fix this by performing the missing unmapping of XDP queues from q_vectors and setting the XDP rings pointer back to NULL after all those queues are released. Also, add an immediate exit from the XDP callback in case of ring preparation failure.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linuxNo solution exists | Jul 4, 2025 | Jul 4, 2025 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernelUpgrade kernel-tools-libsUpgrade bpftoolUpgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade python3-perf | Oct 14, 2025 | Sep 9, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade bpftoolUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade python3-perf | Sep 15, 2025 | Sep 9, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade bpftoolUpgrade python3-perfUpgrade kernelUpgrade kernel-tools-libs | Oct 24, 2025 | Sep 9, 2025 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jul 3, 2025 |
| Suse | — | Upgrade kernel-rt-develUpgrade kernel-default-base-rebuildUpgrade kernel-rtUpgrade cluster-md-kmp-64kbUpgrade kernel-azureUpgrade kernel-macrosUpgrade dlm-kmp-64kbUpgrade kernel-rt-vdsoUpgrade kernel-obs-qaUpgrade dtb-rockchipUpgrade dtb-xilinxUpgrade dtb-mediatekUpgrade kernel-default-vdsoUpgrade kernel-develUpgrade dtb-amlogicUpgrade kernel-kvmsmallUpgrade dtb-nvidiaUpgrade dtb-qcomUpgrade dtb-alteraUpgrade kernel-devel-azureUpgrade dtb-exynosUpgrade dtb-sprdUpgrade kernel-devel-rtUpgrade kernel-rt-livepatchUpgrade kernel-default-optionalUpgrade cluster-md-kmp-rtUpgrade dtb-armUpgrade kernel-sourceUpgrade kernel-debug-vdsoUpgrade reiserfs-kmp-azureUpgrade gfs2-kmp-azureUpgrade kernel-defaultUpgrade kernel-default-extraUpgrade kernel-syms-azureUpgrade kselftests-kmp-64kbUpgrade kernel-azure-optionalUpgrade ocfs2-kmp-defaultUpgrade dtb-caviumUpgrade kernel-azure-develUpgrade kernel-rt-extraUpgrade kernel-source-vanillaUpgrade kernel-obs-buildUpgrade gfs2-kmp-rtUpgrade cluster-md-kmp-azureUpgrade kselftests-kmp-azureUpgrade kernel-default-livepatch-develUpgrade kernel-kvmsmall-vdsoUpgrade gfs2-kmp-defaultUpgrade gfs2-kmp-64kbUpgrade dtb-renesasUpgrade dlm-kmp-defaultUpgrade dlm-kmp-rtUpgrade reiserfs-kmp-64kbUpgrade kernel-source-azureUpgrade kernel-rt-livepatch-develUpgrade dtb-apmUpgrade dtb-freescaleUpgrade kernel-64kb-extraUpgrade kselftests-kmp-rtUpgrade kernel-64kb-optionalUpgrade dtb-amazonUpgrade cluster-md-kmp-defaultUpgrade ocfs2-kmp-64kbUpgrade kernel-docs-htmlUpgrade kernel-default-livepatchUpgrade kernel-debug-develUpgrade kernel-64kbUpgrade kernel-rt_debug-develUpgrade kernel-azure-extraUpgrade kernel-default-develUpgrade dlm-kmp-azureUpgrade kselftests-kmp-defaultUpgrade kernel-rt_debug-vdsoUpgrade kernel-kvmsmall-develUpgrade dtb-amdUpgrade kernel-zfcpdumpUpgrade kernel-source-rtUpgrade kernel-rt_debugUpgrade dtb-hisiliconUpgrade kernel-docsUpgrade dtb-allwinnerUpgrade dtb-socionextUpgrade kernel-syms-rtUpgrade kernel-symsUpgrade reiserfs-kmp-defaultUpgrade ocfs2-kmp-azureUpgrade dtb-lgUpgrade dtb-broadcomUpgrade dtb-appleUpgrade kernel-azure-vdsoUpgrade dtb-marvellUpgrade ocfs2-kmp-rtUpgrade kernel-default-baseUpgrade kernel-debugUpgrade reiserfs-kmp-rtUpgrade kernel-64kb-develUpgrade kernel-rt-optional | Dec 5, 2025 | Aug 18, 2025 |
| Ubuntu | — | Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-nvidia-6.8Upgrade linux-image-realtime-6.8.1Upgrade linux-image-oem-24.04cUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-6.14.0-1016-gcp-64kUpgrade linux-image-6.14.0-1013-awsUpgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-6.14.0-32-generic-64kUpgrade linux-image-oem-22.04dUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-genericUpgrade linux-image-generic-6.14Upgrade linux-image-gke-64k-6.8Upgrade linux-image-oem-22.04cUpgrade linux-image-gke-6.8Upgrade linux-image-oem-22.04bUpgrade linux-image-6.14.0-1016-gcpUpgrade linux-image-gcp-fips-6.8Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-generic-64kUpgrade linux-image-azure-fips-6.8Upgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-6.14.0-1013-aws-64kUpgrade linux-image-gcp-64k-6.14Upgrade linux-image-aws-64kUpgrade linux-image-aws-lts-24.04Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-aws-6.8Upgrade linux-image-oracle-6.8Upgrade linux-image-oem-24.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-virtual-6.14Upgrade linux-image-oracle-64kUpgrade linux-image-xilinx-6.8Upgrade linux-image-azure-6.8Upgrade linux-image-gke-64kUpgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-nvidia-64kUpgrade linux-image-nvidiaUpgrade linux-image-gcp-fipsUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-6.14.0-1013-oracle-64kUpgrade linux-image-raspi-6.8Upgrade linux-image-virtual-6.8Upgrade linux-image-azureUpgrade linux-image-gcpUpgrade linux-image-aws-6.14Upgrade linux-image-aws-fips-6.8Upgrade linux-image-gkeopUpgrade linux-image-raspi-6.14Upgrade linux-image-generic-6.8Upgrade linux-image-intel-iot-realtimeUpgrade linux-image-6.8.0-1051-azureUpgrade linux-image-intel-iotgUpgrade linux-image-xilinxUpgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-6.8.0-100-genericUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-raspi-realtimeUpgrade linux-image-oracle-64k-6.14Upgrade linux-image-raspiUpgrade linux-image-oem-24.04aUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-realtime-6.14Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-6.14.0-1012-realtimeUpgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-realtime-hwe-22.04Upgrade linux-image-fips-6.8Upgrade linux-image-raspi-realtime-6.8Upgrade linux-image-kvmUpgrade linux-image-aws-64k-6.14Upgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-aws-64k-6.8Upgrade linux-image-6.8.0-1046-awsUpgrade linux-image-gcp-64kUpgrade linux-image-gcp-6.14Upgrade linux-image-6.14.0-1013-oracleUpgrade linux-image-awsUpgrade linux-image-6.8.0-100-fipsUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-oem-22.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-generic-lpaeUpgrade linux-image-azure-lts-24.04Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-generic-64k-6.14Upgrade linux-image-azure-fipsUpgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-ibm-6.8Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-fipsUpgrade linux-image-generic-64k-6.8Upgrade linux-image-6.8.0-1046-azureUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-oem-24.04bUpgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-gkeUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-oracle-6.14Upgrade linux-image-6.14.0-32-genericUpgrade linux-image-ibm-classicUpgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-6.14.0-1014-raspiUpgrade linux-image-6.14.0-1012-azureUpgrade linux-image-oracleUpgrade linux-image-lowlatency-6.8Upgrade linux-image-gcp-6.8Upgrade linux-image-azure-6.14Upgrade linux-image-aws-fipsUpgrade linux-image-gkeop-6.8Upgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-6.14.0-1012-oemUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-oem-6.14Upgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-lowlatency-64kUpgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-virtualUpgrade linux-image-realtimeUpgrade linux-image-oem-22.04aUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-lowlatencyUpgrade linux-image-ibmUpgrade linux-image-6.8.0-100-generic-64k | Jul 7, 2025 | Jul 3, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub