In the Linux kernel, the following vulnerability has been resolved:
ice: fix Tx scheduler error handling in XDP callback
When the XDP program is loaded, the XDP callback adds new Tx queues. This means that the callback must update the Tx scheduler with the new queue number. In the event of a Tx scheduler failure, the XDP callback should also fail and roll back any changes previously made for XDP preparation.
The previous implementation had a bug that not all changes made by the XDP callback were rolled back. This caused the crash with the following call trace:
[ +9.549584] ice 0000:ca:00.0: Failed VSI LAN queue config for XDP, error: -5 [ +0.382335] Oops: general protection fault, probably for non-canonical address 0x50a2250a90495525: 0000 [#1] SMP NOPTI [ +0.010710] CPU: 103 UID: 0 PID: 0 Comm: swapper/103 Not tainted 6.14.0-net-next-mar-31+ #14 PREEMPT(voluntary) [ +0.010175] Hardware name: Intel Corporation M50CYP2SBSTD/M50CYP2SBSTD, BIOS SE5C620.86B.01.01.0005.2202160810 02/16/2022 [ +0.010946] RIP: 0010:__ice_update_sample+0x39/0xe0 [ice]
[...]
[ +0.002715] Call Trace: [ +0.002452] <IRQ> [ +0.002021] ? __die_body.cold+0x19/0x29 [ +0.003922] ? die_addr+0x3c/0x60 [ +0.003319] ? exc_general_protection+0x17c/0x400 [ +0.004707] ? asm_exc_general_protection+0x26/0x30 [ +0.004879] ? __ice_update_sample+0x39/0xe0 [ice] [ +0.004835] ice_napi_poll+0x665/0x680 [ice] [ +0.004320] __napi_poll+0x28/0x190 [ +0.003500] net_rx_action+0x198/0x360 [ +0.003752] ? update_rq_clock+0x39/0x220 [ +0.004013] handle_softirqs+0xf1/0x340 [ +0.003840] ? sched_clock_cpu+0xf/0x1f0 [ +0.003925] __irq_exit_rcu+0xc2/0xe0 [ +0.003665] common_interrupt+0x85/0xa0 [ +0.003839] </IRQ> [ +0.002098] <TASK> [ +0.002106] asm_common_interrupt+0x26/0x40 [ +0.004184] RIP: 0010:cpuidle_enter_state+0xd3/0x690
Fix this by performing the missing unmapping of XDP queues from q_vectors and setting the XDP rings pointer back to NULL after all those queues are released. Also, add an immediate exit from the XDP callback in case of ring preparation failure.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 4, 2025 | Jul 4, 2025 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-toolsUpgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade kernelUpgrade bpftool | Oct 14, 2025 | Sep 9, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade bpftoolUpgrade kernel-toolsUpgrade kernel | Sep 15, 2025 | Sep 9, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade python3-perfUpgrade bpftoolUpgrade kernel | Oct 24, 2025 | Sep 9, 2025 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jul 3, 2025 |
| Suse | — | Upgrade gfs2-kmp-defaultUpgrade kernel-kvmsmall-vdsoUpgrade dtb-socionextUpgrade kernel-rt-optionalUpgrade kernel-debugUpgrade gfs2-kmp-64kbUpgrade kernel-source-azureUpgrade reiserfs-kmp-64kbUpgrade kernel-default-baseUpgrade kernel-symsUpgrade kernel-syms-rtUpgrade reiserfs-kmp-rtUpgrade kernel-azure-vdsoUpgrade kernel-zfcpdumpUpgrade dtb-broadcomUpgrade kernel-64kb-extraUpgrade dlm-kmp-azureUpgrade dtb-allwinnerUpgrade dtb-amdUpgrade kernel-rt_debug-develUpgrade kernel-kvmsmall-develUpgrade dtb-apmUpgrade dtb-freescaleUpgrade dtb-hisiliconUpgrade kernel-rt_debug-vdsoUpgrade dtb-lgUpgrade kernel-azure-extraUpgrade kernel-debug-develUpgrade kernel-source-rtUpgrade kselftests-kmp-defaultUpgrade kernel-rt_debugUpgrade ocfs2-kmp-64kbUpgrade kselftests-kmp-rtUpgrade cluster-md-kmp-defaultUpgrade kernel-64kb-optionalUpgrade kernel-default-livepatch-develUpgrade kselftests-kmp-azureUpgrade dtb-amazonUpgrade dtb-marvellUpgrade ocfs2-kmp-rtUpgrade dtb-renesasUpgrade dtb-appleUpgrade dlm-kmp-defaultUpgrade dlm-kmp-rtUpgrade cluster-md-kmp-azureUpgrade kernel-64kbUpgrade ocfs2-kmp-azureUpgrade reiserfs-kmp-defaultUpgrade kernel-64kb-develUpgrade kernel-default-develUpgrade kernel-docsUpgrade kernel-default-livepatchUpgrade kernel-rt-livepatch-develUpgrade kernel-docs-htmlUpgrade dtb-alteraUpgrade cluster-md-kmp-64kbUpgrade ocfs2-kmp-defaultUpgrade kselftests-kmp-64kbUpgrade dtb-armUpgrade gfs2-kmp-rtUpgrade kernel-sourceUpgrade dtb-amlogicUpgrade dlm-kmp-64kbUpgrade cluster-md-kmp-rtUpgrade kernel-obs-qaUpgrade kernel-kvmsmallUpgrade kernel-develUpgrade kernel-default-vdsoUpgrade kernel-default-optionalUpgrade kernel-debug-vdsoUpgrade dtb-sprdUpgrade dtb-exynosUpgrade kernel-devel-rtUpgrade kernel-rt-extraUpgrade kernel-obs-buildUpgrade kernel-syms-azureUpgrade kernel-source-vanillaUpgrade dtb-rockchipUpgrade kernel-azureUpgrade kernel-rtUpgrade kernel-default-base-rebuildUpgrade dtb-xilinxUpgrade kernel-rt-develUpgrade reiserfs-kmp-azureUpgrade dtb-mediatekUpgrade kernel-macrosUpgrade gfs2-kmp-azureUpgrade kernel-devel-azureUpgrade kernel-rt-vdsoUpgrade kernel-defaultUpgrade kernel-azure-optionalUpgrade kernel-azure-develUpgrade dtb-caviumUpgrade kernel-default-extraUpgrade dtb-nvidiaUpgrade kernel-rt-livepatchUpgrade dtb-qcom | Dec 5, 2025 | Aug 18, 2025 |
| Ubuntu | — | Upgrade linux-image-6.14.0-1012-oemUpgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-fipsUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-ibm-6.8Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-oem-6.14Upgrade linux-image-oem-24.04bUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-gkeUpgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-generic-64k-6.8Upgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-6.8.0-1046-azureUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-oem-22.04Upgrade linux-image-oem-22.04aUpgrade linux-image-virtualUpgrade linux-image-gcp-6.8Upgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-azure-6.14Upgrade linux-image-oracleUpgrade linux-image-6.14.0-32-genericUpgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-aws-fipsUpgrade linux-image-generic-64k-6.14Upgrade linux-image-6.14.0-1013-oracleUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-6.14.0-1012-azureUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-generic-lpaeUpgrade linux-image-azure-fipsUpgrade linux-image-azure-lts-24.04Upgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-awsUpgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-ibmUpgrade linux-image-ibm-classicUpgrade linux-image-6.8.0-100-fipsUpgrade linux-image-realtimeUpgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-gkeop-6.8Upgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-lowlatencyUpgrade linux-image-oracle-6.14Upgrade linux-image-6.14.0-1014-raspiUpgrade linux-image-lowlatency-6.8Upgrade linux-image-6.8.0-1051-azureUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-aws-64kUpgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-6.14.0-32-generic-64kUpgrade linux-image-6.8.0-1046-awsUpgrade linux-image-6.14.0-1013-awsUpgrade linux-image-oracle-6.8Upgrade linux-image-virtual-6.14Upgrade linux-image-oem-24.04cUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-xilinx-6.8Upgrade linux-image-oem-24.04Upgrade linux-image-gkeopUpgrade linux-image-azureUpgrade linux-image-virtual-6.8Upgrade linux-image-nvidiaUpgrade linux-image-raspi-6.8Upgrade linux-image-aws-fips-6.8Upgrade linux-image-6.8.0-100-genericUpgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-realtime-6.8.1Upgrade linux-image-gcpUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-oem-22.04cUpgrade linux-image-6.14.0-1013-oracle-64kUpgrade linux-image-gcp-fipsUpgrade linux-image-aws-6.14Upgrade linux-image-fips-6.8Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-6.14.0-1013-aws-64kUpgrade linux-image-6.14.0-1016-gcpUpgrade linux-image-oem-22.04bUpgrade linux-image-gke-6.8Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-gke-64k-6.8Upgrade linux-image-azure-fips-6.8Upgrade linux-image-raspi-6.14Upgrade linux-image-aws-64k-6.8Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-6.14.0-1012-realtimeUpgrade linux-image-gcp-fips-6.8Upgrade linux-image-generic-64kUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-gcp-64kUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-oem-24.04aUpgrade linux-image-intel-iotgUpgrade linux-image-aws-64k-6.14Upgrade linux-image-6.14.0-1016-gcp-64kUpgrade linux-image-gcp-64k-6.14Upgrade linux-image-realtime-6.14Upgrade linux-image-gke-64kUpgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-azure-6.8Upgrade linux-image-aws-6.8Upgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-nvidia-6.8Upgrade linux-image-oem-22.04dUpgrade linux-image-generic-6.14Upgrade linux-image-genericUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-gcp-64k-6.8Upgrade linux-image-raspi-realtime-6.8Upgrade linux-image-raspi-realtimeUpgrade linux-image-nvidia-64kUpgrade linux-image-kvmUpgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-raspiUpgrade linux-image-xilinxUpgrade linux-image-oracle-64k-6.14Upgrade linux-image-generic-6.8Upgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-oracle-64kUpgrade linux-image-aws-lts-24.04Upgrade linux-image-gcp-6.14Upgrade linux-image-realtime-hwe-22.04 | Jul 7, 2025 | Jul 3, 2025 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub