In the Linux kernel, the following vulnerability has been resolved:
ice: fix Tx scheduler error handling in XDP callback
When the XDP program is loaded, the XDP callback adds new Tx queues. This means that the callback must update the Tx scheduler with the new queue number. In the event of a Tx scheduler failure, the XDP callback should also fail and roll back any changes previously made for XDP preparation.
The previous implementation had a bug that not all changes made by the XDP callback were rolled back. This caused the crash with the following call trace:
[ +9.549584] ice 0000:ca:00.0: Failed VSI LAN queue config for XDP, error: -5 [ +0.382335] Oops: general protection fault, probably for non-canonical address 0x50a2250a90495525: 0000 [#1] SMP NOPTI [ +0.010710] CPU: 103 UID: 0 PID: 0 Comm: swapper/103 Not tainted 6.14.0-net-next-mar-31+ #14 PREEMPT(voluntary) [ +0.010175] Hardware name: Intel Corporation M50CYP2SBSTD/M50CYP2SBSTD, BIOS SE5C620.86B.01.01.0005.2202160810 02/16/2022 [ +0.010946] RIP: 0010:__ice_update_sample+0x39/0xe0 [ice]
[...]
[ +0.002715] Call Trace: [ +0.002452] <IRQ> [ +0.002021] ? __die_body.cold+0x19/0x29 [ +0.003922] ? die_addr+0x3c/0x60 [ +0.003319] ? exc_general_protection+0x17c/0x400 [ +0.004707] ? asm_exc_general_protection+0x26/0x30 [ +0.004879] ? __ice_update_sample+0x39/0xe0 [ice] [ +0.004835] ice_napi_poll+0x665/0x680 [ice] [ +0.004320] __napi_poll+0x28/0x190 [ +0.003500] net_rx_action+0x198/0x360 [ +0.003752] ? update_rq_clock+0x39/0x220 [ +0.004013] handle_softirqs+0xf1/0x340 [ +0.003840] ? sched_clock_cpu+0xf/0x1f0 [ +0.003925] __irq_exit_rcu+0xc2/0xe0 [ +0.003665] common_interrupt+0x85/0xa0 [ +0.003839] </IRQ> [ +0.002098] <TASK> [ +0.002106] asm_common_interrupt+0x26/0x40 [ +0.004184] RIP: 0010:cpuidle_enter_state+0xd3/0x690
Fix this by performing the missing unmapping of XDP queues from q_vectors and setting the XDP rings pointer back to NULL after all those queues are released. Also, add an immediate exit from the XDP callback in case of ring preparation failure.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 4, 2025 | Jul 4, 2025 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernelUpgrade bpftool | Oct 14, 2025 | Sep 9, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-toolsUpgrade bpftool | Sep 15, 2025 | Sep 9, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernelUpgrade bpftool | Oct 24, 2025 | Sep 9, 2025 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jul 3, 2025 |
| Suse | — | Upgrade kselftests-kmp-defaultUpgrade kernel-64kb-extraUpgrade kernel-rt-optionalUpgrade kernel-kvmsmall-develUpgrade kernel-rt_debug-vdsoUpgrade dtb-renesasUpgrade gfs2-kmp-64kbUpgrade dlm-kmp-rtUpgrade gfs2-kmp-defaultUpgrade dlm-kmp-defaultUpgrade reiserfs-kmp-64kbUpgrade dtb-broadcomUpgrade kernel-docsUpgrade kernel-zfcpdumpUpgrade kernel-source-azureUpgrade dtb-socionextUpgrade kselftests-kmp-azureUpgrade kernel-debug-develUpgrade kernel-kvmsmall-vdsoUpgrade kernel-default-develUpgrade kernel-rt-livepatch-develUpgrade dtb-lgUpgrade kernel-64kb-develUpgrade dtb-appleUpgrade kernel-syms-rtUpgrade reiserfs-kmp-rtUpgrade dtb-marvellUpgrade kernel-default-baseUpgrade kernel-symsUpgrade ocfs2-kmp-rtUpgrade cluster-md-kmp-defaultUpgrade kernel-azure-extraUpgrade ocfs2-kmp-64kbUpgrade kernel-azure-vdsoUpgrade kernel-default-livepatchUpgrade kernel-rt_debug-develUpgrade kernel-debugUpgrade kernel-64kb-optionalUpgrade kernel-default-livepatch-develUpgrade cluster-md-kmp-azureUpgrade kernel-docs-htmlUpgrade dtb-freescaleUpgrade dtb-hisiliconUpgrade kselftests-kmp-rtUpgrade dtb-amazonUpgrade dtb-amdUpgrade dtb-apmUpgrade dtb-allwinnerUpgrade kernel-rt_debugUpgrade dlm-kmp-azureUpgrade kernel-source-rtUpgrade kernel-64kbUpgrade reiserfs-kmp-defaultUpgrade ocfs2-kmp-azureUpgrade kernel-debug-vdsoUpgrade dtb-sprdUpgrade kernel-develUpgrade kernel-default-vdsoUpgrade kernel-obs-buildUpgrade cluster-md-kmp-64kbUpgrade dtb-qcomUpgrade dtb-xilinxUpgrade dtb-rockchipUpgrade dtb-armUpgrade dtb-amlogicUpgrade dtb-nvidiaUpgrade kernel-default-base-rebuildUpgrade dtb-exynosUpgrade kernel-macrosUpgrade kernel-devel-azureUpgrade gfs2-kmp-azureUpgrade dtb-mediatekUpgrade kernel-rt-vdsoUpgrade cluster-md-kmp-rtUpgrade kernel-obs-qaUpgrade dlm-kmp-64kbUpgrade kernel-kvmsmallUpgrade dtb-alteraUpgrade kernel-devel-rtUpgrade kernel-default-optionalUpgrade ocfs2-kmp-defaultUpgrade kselftests-kmp-64kbUpgrade kernel-syms-azureUpgrade kernel-source-vanillaUpgrade kernel-rt-extraUpgrade kernel-azureUpgrade kernel-rt-develUpgrade kernel-rtUpgrade dtb-caviumUpgrade kernel-default-extraUpgrade kernel-azure-develUpgrade kernel-azure-optionalUpgrade gfs2-kmp-rtUpgrade kernel-defaultUpgrade reiserfs-kmp-azureUpgrade kernel-rt-livepatchUpgrade kernel-source | Dec 5, 2025 | Aug 18, 2025 |
| Ubuntu | — | Upgrade linux-image-nvidiaUpgrade linux-image-raspi-6.8Upgrade linux-image-virtual-6.8Upgrade linux-image-azureUpgrade linux-image-gcpUpgrade linux-image-xilinx-6.8Upgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-oem-24.04Upgrade linux-image-6.8.0-100-genericUpgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-aws-6.14Upgrade linux-image-fips-6.8Upgrade linux-image-gcp-fipsUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-oem-22.04cUpgrade linux-image-6.14.0-1013-oracle-64kUpgrade linux-image-aws-fips-6.8Upgrade linux-image-gke-64k-6.8Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-6.14.0-1012-realtimeUpgrade linux-image-gkeopUpgrade linux-image-nvidia-6.8Upgrade linux-image-6.8.0-1046-awsUpgrade linux-image-gke-6.8Upgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-genericUpgrade linux-image-6.14.0-32-generic-64kUpgrade linux-image-generic-6.14Upgrade linux-image-gcp-64k-6.14Upgrade linux-image-oem-22.04dUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-realtime-6.8.1Upgrade linux-image-aws-6.8Upgrade linux-image-aws-lts-24.04Upgrade linux-image-6.14.0-1016-gcp-64kUpgrade linux-image-gcp-6.14Upgrade linux-image-oracle-64k-6.8Upgrade linux-image-virtual-6.14Upgrade linux-image-6.14.0-1013-awsUpgrade linux-image-oem-24.04cUpgrade linux-image-oracle-64k-6.14Upgrade linux-image-oracle-6.8Upgrade linux-image-aws-64kUpgrade linux-image-nvidia-64kUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-gke-64kUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-kvmUpgrade linux-image-azure-6.8Upgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-gcp-fips-6.8Upgrade linux-image-generic-64kUpgrade linux-image-6.14.0-1016-gcpUpgrade linux-image-xilinxUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-6.14.0-1013-aws-64kUpgrade linux-image-generic-6.8Upgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-oem-24.04aUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-intel-iotgUpgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-aws-64k-6.14Upgrade linux-image-aws-64k-6.8Upgrade linux-image-gcp-64kUpgrade linux-image-azure-fips-6.8Upgrade linux-image-raspi-realtimeUpgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-raspiUpgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-6.8.0-1051-azureUpgrade linux-image-oem-22.04bUpgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-oracle-64kUpgrade linux-image-raspi-6.14Upgrade linux-image-realtime-6.14Upgrade linux-image-realtime-hwe-22.04Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-lowlatency-6.8Upgrade linux-image-oracle-6.14Upgrade linux-image-oem-24.04bUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-ibm-6.8Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-oem-22.04aUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-ibmUpgrade linux-image-gkeop-6.8Upgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-6.14.0-1013-oracleUpgrade linux-image-6.14.0-32-genericUpgrade linux-image-6.14.0-1014-raspiUpgrade linux-image-azure-6.14Upgrade linux-image-aws-fipsUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-oracleUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-awsUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-ibm-classicUpgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-virtualUpgrade linux-image-oem-22.04Upgrade linux-image-6.8.0-100-fipsUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-generic-64k-6.14Upgrade linux-image-azure-lts-24.04Upgrade linux-image-azure-fipsUpgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-generic-lpaeUpgrade linux-image-lowlatency-64kUpgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-6.14.0-1012-oemUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-oem-6.14Upgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-6.14.0-1012-azureUpgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-gcp-6.8Upgrade linux-image-6.8.0-1046-azureUpgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-gkeUpgrade linux-image-generic-64k-6.8Upgrade linux-image-realtimeUpgrade linux-image-lowlatencyUpgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-fipsUpgrade linux-image-6.8.1-1041-realtime | Jul 7, 2025 | Jul 3, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub