In the Linux kernel, the following vulnerability has been resolved:
net: openvswitch: Fix the dead loop of MPLS parse
The unexpected MPLS packet may not end with the bottom label stack. When there are many stacks, The label count value has wrapped around. A dead loop occurs, soft lockup/CPU stuck finally.
stack backtrace: UBSAN: array-index-out-of-bounds in /build/linux-0Pa0xK/linux-5.15.0/net/openvswitch/flow.c:662:26 index -1 is out of range for type '__be32 [3]' CPU: 34 PID: 0 Comm: swapper/34 Kdump: loaded Tainted: G OE 5.15.0-121-generic #131-Ubuntu Hardware name: Dell Inc. PowerEdge C6420/0JP9TF, BIOS 2.12.2 07/14/2021 Call Trace: <IRQ> show_stack+0x52/0x5c dump_stack_lvl+0x4a/0x63 dump_stack+0x10/0x16 ubsan_epilogue+0x9/0x36 __ubsan_handle_out_of_bounds.cold+0x44/0x49 key_extract_l3l4+0x82a/0x840 [openvswitch] ? kfree_skbmem+0x52/0xa0 key_extract+0x9c/0x2b0 [openvswitch] ovs_flow_key_extract+0x124/0x350 [openvswitch] ovs_vport_receive+0x61/0xd0 [openvswitch] ? kernel_init_free_pages.part.0+0x4a/0x70 ? get_page_from_freelist+0x353/0x540 netdev_port_receive+0xc4/0x180 [openvswitch] ? netdev_port_receive+0x180/0x180 [openvswitch] netdev_frame_hook+0x1f/0x40 [openvswitch] __netif_receive_skb_core.constprop.0+0x23a/0xf00 __netif_receive_skb_list_core+0xfa/0x240 netif_receive_skb_list_internal+0x18e/0x2a0 napi_complete_done+0x7a/0x1c0 bnxt_poll+0x155/0x1c0 [bnxt_en] __napi_poll+0x30/0x180 net_rx_action+0x126/0x280 ? bnxt_msix+0x67/0x80 [bnxt_en] handle_softirqs+0xda/0x2d0 irq_exit_rcu+0x96/0xc0 common_interrupt+0x8e/0xa0 </IRQ>
CVSS Details
- CVSS 3.1 Base Score: 9.4
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfoUpgrade kernel-livepatch-5.15.186-128.192Upgrade kernel-livepatch-5.10.239-236.958Upgrade kernel-headersUpgrade kernel-develUpgrade perf-debuginfoUpgrade python-perf-debuginfoUpgrade python-perfUpgrade bpftool-debuginfoUpgrade perfUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-develUpgrade bpftoolUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade kernel-tools | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade kernel-debuginfoUpgrade kernel-livepatch-6.12.35-55.103Upgrade kernel6.12-modules-extraUpgrade kernel-livepatch-6.1.144-170.251Upgrade perfUpgrade kernel-tools-develUpgrade kernel-tools-debuginfoUpgrade kernel-develUpgrade kernel-modules-extra-commonUpgrade python3-perf6.12-debuginfoUpgrade kernel6.12-debuginfo-common-x86_64Upgrade kernel-libbpfUpgrade python3-perfUpgrade kernel-debuginfo-common-aarch64Upgrade perf6.12-debuginfoUpgrade python3-perf6.12Upgrade perf-debuginfoUpgrade kernel-libbpf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade kernel6.12Upgrade kernel-modules-extraUpgrade perf6.12Upgrade kernel-toolsUpgrade bpftool-debuginfoUpgrade kernel-headersUpgrade kernel6.12-debuginfoUpgrade python3-perf-debuginfoUpgrade kernel-libbpf-staticUpgrade kernel-libbpf-develUpgrade bpftoolUpgrade kernel6.12-debuginfo-common-aarch64 | Aug 5, 2025 | Jul 3, 2025 |
| Debian | — | Upgrade linux-6.1Upgrade linux | Jul 4, 2025 | Jul 4, 2025 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-toolsUpgrade bpftoolUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernelUpgrade kernel-abi-stablelists | Dec 12, 2025 | Nov 11, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernelUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade bpftoolUpgrade kernel-toolsUpgrade python3-perf | Nov 12, 2025 | Nov 11, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade kernel-toolsUpgrade bpftoolUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade kernel-tools-libsUpgrade python3-perf | Nov 21, 2025 | Nov 11, 2025 |
| Oracle_linux | — | Upgrade kernel-uek | Sep 10, 2025 | Jul 3, 2025 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jul 3, 2025 |
| Suse | — | Upgrade kernel-source-rtUpgrade cluster-md-kmp-defaultUpgrade kernel-rt-optionalUpgrade dtb-amlogicUpgrade kernel-azure-develUpgrade kernel-syms-azureUpgrade kernel-docs-htmlUpgrade dtb-qcomUpgrade dlm-kmp-rtUpgrade kernel-syms-rtUpgrade kernel-kvmsmallUpgrade kernel-kvmsmall-vdsoUpgrade kernel-sourceUpgrade dtb-exynosUpgrade kernel-rtUpgrade kernel-rt-vdsoUpgrade kselftests-kmp-64kbUpgrade kernel-rt_debug-develUpgrade kernel-devel-azureUpgrade dtb-sprdUpgrade dtb-rockchipUpgrade kernel-rt-livepatch-develUpgrade kernel-rt_debug-vdsoUpgrade reiserfs-kmp-azureUpgrade kernel-default-base-rebuildUpgrade cluster-md-kmp-64kbUpgrade kernel-debug-vdsoUpgrade kernel-azure-optionalUpgrade kernel-azure-vdsoUpgrade kernel-64kb-extraUpgrade kernel-default-vdsoUpgrade kernel-obs-buildUpgrade kselftests-kmp-azureUpgrade kernel-defaultUpgrade ocfs2-kmp-64kbUpgrade kernel-docsUpgrade kernel-source-vanillaUpgrade gfs2-kmp-defaultUpgrade kernel-rt-extraUpgrade reiserfs-kmp-64kbUpgrade dtb-nvidiaUpgrade kernel-azureUpgrade kernel-macrosUpgrade dtb-alteraUpgrade ocfs2-kmp-azureUpgrade kernel-default-livepatchUpgrade kernel-azure-extraUpgrade dtb-apmUpgrade kernel-64kb-develUpgrade dtb-hisiliconUpgrade dtb-freescaleUpgrade reiserfs-kmp-rtUpgrade kselftests-kmp-rtUpgrade gfs2-kmp-rtUpgrade kernel-default-baseUpgrade gfs2-kmp-azureUpgrade kernel-default-optionalUpgrade kselftests-kmp-defaultUpgrade kernel-rt-develUpgrade dtb-socionextUpgrade dtb-mediatekUpgrade dtb-broadcomUpgrade kernel-obs-qaUpgrade ocfs2-kmp-defaultUpgrade kernel-zfcpdumpUpgrade kernel-kvmsmall-develUpgrade gfs2-kmp-64kbUpgrade dtb-caviumUpgrade dtb-appleUpgrade dtb-amazonUpgrade dtb-amdUpgrade cluster-md-kmp-azureUpgrade kernel-symsUpgrade cluster-md-kmp-rtUpgrade reiserfs-kmp-defaultUpgrade kernel-devel-rtUpgrade kernel-default-livepatch-develUpgrade kernel-default-extraUpgrade kernel-64kbUpgrade dtb-lgUpgrade dlm-kmp-azureUpgrade kernel-64kb-optionalUpgrade dlm-kmp-defaultUpgrade dtb-allwinnerUpgrade kernel-rt_debugUpgrade dtb-marvellUpgrade dtb-armUpgrade ocfs2-kmp-rtUpgrade kernel-rt-livepatchUpgrade kernel-develUpgrade kernel-debug-develUpgrade dtb-xilinxUpgrade dtb-renesasUpgrade kernel-debugUpgrade dlm-kmp-64kbUpgrade kernel-source-azureUpgrade kernel-default-devel | Dec 5, 2025 | Sep 18, 2025 |
| Ubuntu | — | Upgrade linux-image-5.15.0-1034-nvidia-tegra-igxUpgrade linux-image-raspi-realtimeUpgrade linux-image-virtualUpgrade linux-image-5.15.0-1092-aws-fipsUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-gkeop-6.8Upgrade linux-image-generic-6.8Upgrade linux-image-intel-iot-realtimeUpgrade linux-image-azure-6.8Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-5.15.0-156-lowlatencyUpgrade linux-image-6.8.0-100-fipsUpgrade linux-image-awsUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-ibm-classicUpgrade linux-image-azure-cvmUpgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-6.8.0-1046-azureUpgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-intel-iotgUpgrade linux-image-generic-lpae-5.15Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-aws-64kUpgrade linux-image-azure-fips-6.8Upgrade linux-image-oem-22.04Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-5.15.0-1092-aws-64kUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-gcp-5.15Upgrade linux-image-ibmUpgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-generic-lpaeUpgrade linux-image-gke-5.15Upgrade linux-image-5.15.0-156-generic-lpaeUpgrade linux-image-6.14.0-1013-oracleUpgrade linux-image-5.15.0-1075-gkeopUpgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-raspi-nolpaeUpgrade linux-image-5.15.0-1034-nvidia-tegra-igx-rtUpgrade linux-image-5.15.0-1085-intel-iot-realtimeUpgrade linux-image-aws-64k-5.15Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-oem-22.04aUpgrade linux-image-intel-iotg-5.15Upgrade linux-image-oracle-64kUpgrade linux-image-lowlatency-64kUpgrade linux-image-oracleUpgrade linux-image-oem-24.04aUpgrade linux-image-gkeUpgrade linux-image-xilinxUpgrade linux-image-oem-6.14Upgrade linux-image-5.15.0-1086-ibmUpgrade linux-image-5.15.0-1087-intel-iotgUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-ibm-6.8Upgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-fips-5.15Upgrade linux-image-5.15.0-1092-awsUpgrade linux-image-5.15.0-1056-xilinx-zynqmpUpgrade linux-image-5.15.0-156-genericUpgrade linux-image-realtime-hwe-22.04Upgrade linux-image-fips-6.8Upgrade linux-image-nvidia-tegra-igxUpgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-aws-5.15Upgrade linux-image-gcp-6.8Upgrade linux-image-6.8.0-1051-azureUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-generic-64k-6.14Upgrade linux-image-realtimeUpgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-6.14.0-1012-realtimeUpgrade linux-image-fipsUpgrade linux-image-6.14.0-1014-raspiUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-lowlatencyUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-gcpUpgrade linux-image-5.15.0-1092-gcpUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-oem-22.04bUpgrade linux-image-oem-24.04bUpgrade linux-image-5.15.0-1086-raspiUpgrade linux-image-6.14.0-1016-gcpUpgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-azure-lts-24.04Upgrade linux-image-6.14.0-32-genericUpgrade linux-image-aws-64k-6.8Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-5.15.0-1087-nvidiaUpgrade linux-image-aws-lts-22.04Upgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-oem-24.04Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-oracle-6.8Upgrade linux-image-realtime-6.8.1Upgrade linux-image-6.14.0-1013-oracle-64kUpgrade linux-image-kvmUpgrade linux-image-5.15.0-156-generic-64kUpgrade linux-image-aws-fips-6.8Upgrade linux-image-raspi-5.15Upgrade linux-image-5.15.0-1090-oracleUpgrade linux-image-6.14.0-1012-oemUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-aws-64k-6.14Upgrade linux-image-generic-64k-5.15Upgrade linux-image-azure-lts-22.04Upgrade linux-image-realtime-5.15Upgrade linux-image-raspiUpgrade linux-image-nvidia-5.15Upgrade linux-image-aws-6.8Upgrade linux-image-oem-24.04cUpgrade linux-image-raspi-6.14Upgrade linux-image-5.15.0-1096-azure-fipsUpgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-virtual-5.15Upgrade linux-image-azure-fips-5.15Upgrade linux-image-azure-6.14Upgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-5.15.0-1096-azureUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-generic-6.14Upgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-nvidia-64kUpgrade linux-image-aws-fipsUpgrade linux-image-6.14.0-1013-awsUpgrade linux-image-6.14.0-1016-gcp-64kUpgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-genericUpgrade linux-image-6.8.0-100-genericUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-lowlatency-6.8Upgrade linux-image-lowlatency-5.15Upgrade linux-image-azure-fipsUpgrade linux-image-aws-lts-24.04Upgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-6.14.0-32-generic-64kUpgrade linux-image-virtual-6.14Upgrade linux-image-5.15.0-156-fipsUpgrade linux-image-ibm-5.15Upgrade linux-image-oracle-64k-6.14Upgrade linux-image-5.15.0-1045-nvidia-tegra-rtUpgrade linux-image-gkeop-5.15Upgrade linux-image-gke-64k-6.8Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-nvidia-tegraUpgrade linux-image-azureUpgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-nvidiaUpgrade linux-image-generic-64k-6.8Upgrade linux-image-5.15.0-1089-gkeUpgrade linux-image-gcp-fipsUpgrade linux-image-azure-5.15Upgrade linux-image-gcp-6.14Upgrade linux-image-gcp-fips-6.8Upgrade linux-image-raspi-realtime-6.8Upgrade linux-image-6.14.0-1012-azureUpgrade linux-image-oem-22.04cUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.8.0-1046-awsUpgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-5.15.0-1045-nvidia-tegraUpgrade linux-image-oracle-5.15Upgrade linux-image-oem-22.04dUpgrade linux-image-virtual-6.8Upgrade linux-image-gke-64kUpgrade linux-image-intelUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-6.14.0-1013-aws-64kUpgrade linux-image-generic-5.15Upgrade linux-image-oracle-64k-6.8Upgrade linux-image-kvm-5.15Upgrade linux-image-gkeopUpgrade linux-image-gke-6.8Upgrade linux-image-aws-6.14Upgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-5.15.0-1092-realtimeUpgrade linux-image-5.15.0-1092-gcp-fipsUpgrade linux-image-5.15.0-1088-kvmUpgrade linux-image-5.15.0-1087-nvidia-lowlatencyUpgrade linux-image-xilinx-6.8Upgrade linux-image-realtime-6.14Upgrade linux-image-raspi-6.8Upgrade linux-image-nvidia-tegra-rtUpgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-nvidia-6.8Upgrade linux-image-gcp-64k-6.14Upgrade linux-image-oracle-6.14Upgrade linux-image-5.15.0-156-lowlatency-64kUpgrade linux-image-gcp-fips-5.15Upgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-aws-fips-5.15Upgrade linux-image-gcp-64kUpgrade linux-image-generic-64k | Jul 7, 2025 | Jul 3, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jul 16, 2025 | Jul 3, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub