In the Linux kernel, the following vulnerability has been resolved:
ice: fix Tx scheduler error handling in XDP callback
When the XDP program is loaded, the XDP callback adds new Tx queues. This means that the callback must update the Tx scheduler with the new queue number. In the event of a Tx scheduler failure, the XDP callback should also fail and roll back any changes previously made for XDP preparation.
The previous implementation had a bug that not all changes made by the XDP callback were rolled back. This caused the crash with the following call trace:
[ +9.549584] ice 0000:ca:00.0: Failed VSI LAN queue config for XDP, error: -5 [ +0.382335] Oops: general protection fault, probably for non-canonical address 0x50a2250a90495525: 0000 [#1] SMP NOPTI [ +0.010710] CPU: 103 UID: 0 PID: 0 Comm: swapper/103 Not tainted 6.14.0-net-next-mar-31+ #14 PREEMPT(voluntary) [ +0.010175] Hardware name: Intel Corporation M50CYP2SBSTD/M50CYP2SBSTD, BIOS SE5C620.86B.01.01.0005.2202160810 02/16/2022 [ +0.010946] RIP: 0010:__ice_update_sample+0x39/0xe0 [ice]
[...]
[ +0.002715] Call Trace: [ +0.002452] <IRQ> [ +0.002021] ? __die_body.cold+0x19/0x29 [ +0.003922] ? die_addr+0x3c/0x60 [ +0.003319] ? exc_general_protection+0x17c/0x400 [ +0.004707] ? asm_exc_general_protection+0x26/0x30 [ +0.004879] ? __ice_update_sample+0x39/0xe0 [ice] [ +0.004835] ice_napi_poll+0x665/0x680 [ice] [ +0.004320] __napi_poll+0x28/0x190 [ +0.003500] net_rx_action+0x198/0x360 [ +0.003752] ? update_rq_clock+0x39/0x220 [ +0.004013] handle_softirqs+0xf1/0x340 [ +0.003840] ? sched_clock_cpu+0xf/0x1f0 [ +0.003925] __irq_exit_rcu+0xc2/0xe0 [ +0.003665] common_interrupt+0x85/0xa0 [ +0.003839] </IRQ> [ +0.002098] <TASK> [ +0.002106] asm_common_interrupt+0x26/0x40 [ +0.004184] RIP: 0010:cpuidle_enter_state+0xd3/0x690
Fix this by performing the missing unmapping of XDP queues from q_vectors and setting the XDP rings pointer back to NULL after all those queues are released. Also, add an immediate exit from the XDP callback in case of ring preparation failure.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 4, 2025 | Jul 4, 2025 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernelUpgrade kernel-tools-libsUpgrade bpftoolUpgrade python3-perfUpgrade kernel-toolsUpgrade kernel-abi-stablelists | Oct 14, 2025 | Sep 9, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade bpftoolUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernel | Sep 15, 2025 | Sep 9, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade python3-perfUpgrade kernelUpgrade bpftoolUpgrade kernel-tools-libs | Oct 24, 2025 | Sep 9, 2025 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jul 3, 2025 |
| Suse | — | Upgrade kernel-obs-qaUpgrade kernel-syms-azureUpgrade kselftests-kmp-64kbUpgrade kernel-source-vanillaUpgrade ocfs2-kmp-defaultUpgrade kernel-debug-vdsoUpgrade kernel-obs-buildUpgrade kernel-rt-extraUpgrade cluster-md-kmp-64kbUpgrade kernel-devel-rtUpgrade kernel-default-optionalUpgrade dtb-qcomUpgrade dtb-exynosUpgrade dtb-nvidiaUpgrade kernel-sourceUpgrade dtb-sprdUpgrade dtb-xilinxUpgrade gfs2-kmp-rtUpgrade kernel-rt-livepatchUpgrade kernel-default-extraUpgrade reiserfs-kmp-azureUpgrade dtb-caviumUpgrade kernel-azure-optionalUpgrade kernel-defaultUpgrade dtb-amlogicUpgrade gfs2-kmp-azureUpgrade kernel-devel-azureUpgrade kernel-macrosUpgrade kernel-azure-develUpgrade dtb-armUpgrade dtb-rockchipUpgrade kernel-default-vdsoUpgrade kernel-rt-vdsoUpgrade kernel-default-base-rebuildUpgrade kernel-rtUpgrade kernel-azureUpgrade dlm-kmp-64kbUpgrade dtb-alteraUpgrade kernel-rt-develUpgrade dtb-mediatekUpgrade kernel-kvmsmallUpgrade kernel-develUpgrade cluster-md-kmp-rtUpgrade kernel-64kb-optionalUpgrade kernel-64kb-extraUpgrade kernel-rt_debug-vdsoUpgrade cluster-md-kmp-azureUpgrade kernel-default-livepatch-develUpgrade kselftests-kmp-rtUpgrade dtb-amdUpgrade dlm-kmp-azureUpgrade kselftests-kmp-defaultUpgrade dtb-allwinnerUpgrade dtb-marvellUpgrade dtb-appleUpgrade reiserfs-kmp-rtUpgrade ocfs2-kmp-rtUpgrade kernel-debugUpgrade kernel-azure-vdsoUpgrade kernel-syms-rtUpgrade kernel-symsUpgrade kernel-default-baseUpgrade gfs2-kmp-64kbUpgrade dtb-renesasUpgrade dlm-kmp-defaultUpgrade kernel-source-rtUpgrade dtb-freescaleUpgrade kernel-rt_debugUpgrade dtb-hisiliconUpgrade dtb-apmUpgrade kernel-kvmsmall-vdsoUpgrade kernel-rt-optionalUpgrade reiserfs-kmp-64kbUpgrade gfs2-kmp-defaultUpgrade kernel-source-azureUpgrade dlm-kmp-rtUpgrade kselftests-kmp-azureUpgrade dtb-amazonUpgrade kernel-zfcpdumpUpgrade kernel-rt-livepatch-develUpgrade kernel-docsUpgrade kernel-default-develUpgrade dtb-socionextUpgrade cluster-md-kmp-defaultUpgrade ocfs2-kmp-64kbUpgrade kernel-rt_debug-develUpgrade kernel-docs-htmlUpgrade kernel-default-livepatchUpgrade kernel-64kbUpgrade kernel-debug-develUpgrade kernel-azure-extraUpgrade ocfs2-kmp-azureUpgrade kernel-64kb-develUpgrade dtb-lgUpgrade dtb-broadcomUpgrade reiserfs-kmp-defaultUpgrade kernel-kvmsmall-devel | Dec 5, 2025 | Aug 18, 2025 |
| Ubuntu | — | Upgrade linux-image-generic-64k-6.14Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-gkeop-6.8Upgrade linux-image-awsUpgrade linux-image-virtualUpgrade linux-image-oracle-6.14Upgrade linux-image-azure-fipsUpgrade linux-image-ibmUpgrade linux-image-lowlatencyUpgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-oem-22.04Upgrade linux-image-6.14.0-1013-oracleUpgrade linux-image-oem-22.04aUpgrade linux-image-azure-6.14Upgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-oracleUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-realtimeUpgrade linux-image-gcp-6.8Upgrade linux-image-6.8.0-1046-azureUpgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-azure-lts-24.04Upgrade linux-image-generic-64k-6.8Upgrade linux-image-oem-24.04bUpgrade linux-image-gkeUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-fipsUpgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-ibm-6.8Upgrade linux-image-generic-lpaeUpgrade linux-image-6.14.0-32-genericUpgrade linux-image-6.8.0-100-fipsUpgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-ibm-classicUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-6.14.0-1012-oemUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.14.0-1014-raspiUpgrade linux-image-lowlatency-64kUpgrade linux-image-oem-6.14Upgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-6.14.0-1012-azureUpgrade linux-image-aws-fipsUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-lowlatency-6.8Upgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-6.14.0-1013-oracle-64kUpgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-raspiUpgrade linux-image-intel-iotgUpgrade linux-image-realtime-6.14Upgrade linux-image-raspi-6.14Upgrade linux-image-6.8.0-1046-awsUpgrade linux-image-aws-lts-24.04Upgrade linux-image-6.14.0-1016-gcp-64kUpgrade linux-image-gcp-6.14Upgrade linux-image-6.14.0-1013-awsUpgrade linux-image-virtual-6.14Upgrade linux-image-aws-64k-6.8Upgrade linux-image-nvidia-64kUpgrade linux-image-generic-64kUpgrade linux-image-kvmUpgrade linux-image-oracle-64kUpgrade linux-image-gcp-64k-6.14Upgrade linux-image-oracle-6.8Upgrade linux-image-azure-fips-6.8Upgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-gcp-fips-6.8Upgrade linux-image-nvidia-6.8Upgrade linux-image-oem-22.04dUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-genericUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-nvidiaUpgrade linux-image-virtual-6.8Upgrade linux-image-gcpUpgrade linux-image-aws-fips-6.8Upgrade linux-image-aws-6.14Upgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-azureUpgrade linux-image-raspi-6.8Upgrade linux-image-6.14.0-32-generic-64kUpgrade linux-image-generic-6.14Upgrade linux-image-6.8.0-100-genericUpgrade linux-image-oem-24.04cUpgrade linux-image-gkeopUpgrade linux-image-xilinx-6.8Upgrade linux-image-oem-24.04Upgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-aws-64kUpgrade linux-image-realtime-6.8.1Upgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-intel-iot-realtimeUpgrade linux-image-6.8.0-1051-azureUpgrade linux-image-aws-6.8Upgrade linux-image-realtime-hwe-22.04Upgrade linux-image-oem-22.04bUpgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-6.14.0-1013-aws-64kUpgrade linux-image-6.14.0-1016-gcpUpgrade linux-image-gke-64kUpgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-realtime-hwe-24.04Upgrade linux-image-azure-6.8Upgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-gcp-fipsUpgrade linux-image-oem-22.04cUpgrade linux-image-gke-6.8Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-gke-64k-6.8Upgrade linux-image-fips-6.8Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-6.14.0-1012-realtimeUpgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-xilinxUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-raspi-realtimeUpgrade linux-image-oem-24.04aUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-oracle-64k-6.14Upgrade linux-image-generic-6.8Upgrade linux-image-gcp-64kUpgrade linux-image-aws-64k-6.14 | Jul 7, 2025 | Jul 3, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub