In the Linux kernel, the following vulnerability has been resolved:
net: openvswitch: Fix the dead loop of MPLS parse
The unexpected MPLS packet may not end with the bottom label stack. When there are many stacks, The label count value has wrapped around. A dead loop occurs, soft lockup/CPU stuck finally.
stack backtrace: UBSAN: array-index-out-of-bounds in /build/linux-0Pa0xK/linux-5.15.0/net/openvswitch/flow.c:662:26 index -1 is out of range for type '__be32 [3]' CPU: 34 PID: 0 Comm: swapper/34 Kdump: loaded Tainted: G OE 5.15.0-121-generic #131-Ubuntu Hardware name: Dell Inc. PowerEdge C6420/0JP9TF, BIOS 2.12.2 07/14/2021 Call Trace: <IRQ> show_stack+0x52/0x5c dump_stack_lvl+0x4a/0x63 dump_stack+0x10/0x16 ubsan_epilogue+0x9/0x36 __ubsan_handle_out_of_bounds.cold+0x44/0x49 key_extract_l3l4+0x82a/0x840 [openvswitch] ? kfree_skbmem+0x52/0xa0 key_extract+0x9c/0x2b0 [openvswitch] ovs_flow_key_extract+0x124/0x350 [openvswitch] ovs_vport_receive+0x61/0xd0 [openvswitch] ? kernel_init_free_pages.part.0+0x4a/0x70 ? get_page_from_freelist+0x353/0x540 netdev_port_receive+0xc4/0x180 [openvswitch] ? netdev_port_receive+0x180/0x180 [openvswitch] netdev_frame_hook+0x1f/0x40 [openvswitch] __netif_receive_skb_core.constprop.0+0x23a/0xf00 __netif_receive_skb_list_core+0xfa/0x240 netif_receive_skb_list_internal+0x18e/0x2a0 napi_complete_done+0x7a/0x1c0 bnxt_poll+0x155/0x1c0 [bnxt_en] __napi_poll+0x30/0x180 net_rx_action+0x126/0x280 ? bnxt_msix+0x67/0x80 [bnxt_en] handle_softirqs+0xda/0x2d0 irq_exit_rcu+0x96/0xc0 common_interrupt+0x8e/0xa0 </IRQ>
CVSS Details
- CVSS 3.1 Base Score: 9.4
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade python-perfUpgrade kernel-livepatch-5.15.186-128.192Upgrade kernel-tools-debuginfoUpgrade kernel-develUpgrade perf-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-headersUpgrade perfUpgrade python-perf-debuginfoUpgrade kernel-livepatch-5.10.239-236.958Upgrade kernel-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade bpftoolUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade kernel-tools-develUpgrade kernel-tools | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade kernel-livepatch-6.1.144-170.251Upgrade perf6.12-debuginfoUpgrade kernel6.12-debuginfo-common-x86_64Upgrade kernel-develUpgrade python3-perf6.12Upgrade kernel-libbpf-debuginfoUpgrade python3-perf6.12-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-debuginfoUpgrade python3-perfUpgrade perfUpgrade kernel-debuginfoUpgrade perf-debuginfoUpgrade kernel-livepatch-6.12.35-55.103Upgrade kernel-tools-develUpgrade kernel-libbpfUpgrade kernel6.12-modules-extraUpgrade kernel-modules-extra-commonUpgrade bpftool-debuginfoUpgrade kernel6.12-debuginfoUpgrade kernel-headersUpgrade kernelUpgrade perf6.12Upgrade kernel-toolsUpgrade kernel-libbpf-develUpgrade bpftoolUpgrade python3-perf-debuginfoUpgrade kernel-libbpf-staticUpgrade kernel6.12Upgrade kernel-modules-extraUpgrade kernel6.12-debuginfo-common-aarch64Upgrade kernel-debuginfo-common-x86_64 | Aug 5, 2025 | Jul 3, 2025 |
| Debian | — | Upgrade linux-6.1Upgrade linux | Jul 4, 2025 | Jul 4, 2025 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernelUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel-toolsUpgrade bpftool | Dec 12, 2025 | Nov 11, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade bpftoolUpgrade python3-perfUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-abi-stablelists | Nov 12, 2025 | Nov 11, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade kernel-abi-stablelistsUpgrade bpftoolUpgrade kernel-toolsUpgrade kernelUpgrade python3-perfUpgrade kernel-tools-libs | Nov 21, 2025 | Nov 11, 2025 |
| Oracle_linux | — | Upgrade kernel-uek | Sep 10, 2025 | Jul 3, 2025 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jul 3, 2025 |
| Suse | — | Upgrade kernel-syms-rtUpgrade dlm-kmp-rtUpgrade kernel-rtUpgrade kernel-macrosUpgrade kernel-syms-azureUpgrade reiserfs-kmp-64kbUpgrade cluster-md-kmp-defaultUpgrade kernel-azure-develUpgrade kernel-kvmsmall-vdsoUpgrade dtb-amlogicUpgrade dtb-qcomUpgrade kernel-azureUpgrade kernel-default-vdsoUpgrade dtb-nvidiaUpgrade kernel-64kb-extraUpgrade kernel-azure-optionalUpgrade kselftests-kmp-azureUpgrade ocfs2-kmp-64kbUpgrade gfs2-kmp-defaultUpgrade dtb-alteraUpgrade kernel-rt-extraUpgrade kernel-rt-vdsoUpgrade kernel-azure-vdsoUpgrade kernel-sourceUpgrade dtb-exynosUpgrade kernel-obs-buildUpgrade kernel-rt-livepatch-develUpgrade cluster-md-kmp-64kbUpgrade kernel-kvmsmallUpgrade dtb-rockchipUpgrade kernel-defaultUpgrade kernel-docsUpgrade kernel-source-vanillaUpgrade kernel-default-base-rebuildUpgrade kernel-devel-azureUpgrade kernel-rt_debug-develUpgrade reiserfs-kmp-azureUpgrade kernel-debug-vdsoUpgrade kselftests-kmp-64kbUpgrade dtb-sprdUpgrade kernel-rt_debug-vdsoUpgrade kernel-docs-htmlUpgrade kernel-rt-optionalUpgrade kernel-source-rtUpgrade dtb-armUpgrade dtb-xilinxUpgrade dtb-renesasUpgrade dtb-marvellUpgrade kernel-default-livepatchUpgrade kernel-rt_debugUpgrade kernel-rt-livepatchUpgrade kernel-debug-develUpgrade dtb-allwinnerUpgrade ocfs2-kmp-rtUpgrade kernel-develUpgrade kernel-64kb-develUpgrade gfs2-kmp-rtUpgrade gfs2-kmp-azureUpgrade dtb-hisiliconUpgrade dtb-freescaleUpgrade reiserfs-kmp-rtUpgrade kselftests-kmp-rtUpgrade kernel-default-develUpgrade kernel-rt-develUpgrade cluster-md-kmp-azureUpgrade kselftests-kmp-defaultUpgrade dtb-mediatekUpgrade dtb-amdUpgrade dtb-socionextUpgrade dtb-broadcomUpgrade reiserfs-kmp-defaultUpgrade dtb-amazonUpgrade ocfs2-kmp-azureUpgrade kernel-obs-qaUpgrade kernel-kvmsmall-develUpgrade gfs2-kmp-64kbUpgrade dtb-caviumUpgrade ocfs2-kmp-defaultUpgrade dtb-appleUpgrade kernel-zfcpdumpUpgrade dtb-lgUpgrade kernel-default-extraUpgrade dlm-kmp-defaultUpgrade dlm-kmp-azureUpgrade kernel-devel-rtUpgrade kernel-default-livepatch-develUpgrade kernel-64kb-optionalUpgrade kernel-64kbUpgrade cluster-md-kmp-rtUpgrade dlm-kmp-64kbUpgrade kernel-default-optionalUpgrade kernel-debugUpgrade kernel-default-baseUpgrade kernel-source-azureUpgrade kernel-azure-extraUpgrade kernel-symsUpgrade dtb-apm | Dec 5, 2025 | Sep 18, 2025 |
| Ubuntu | — | Upgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-raspiUpgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-raspi-realtime-6.8Upgrade linux-image-generic-64kUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-realtime-5.15Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-azure-6.14Upgrade linux-image-gcp-6.14Upgrade linux-image-gcp-fipsUpgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-nvidia-tegraUpgrade linux-image-azure-fipsUpgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-5.15.0-1096-azureUpgrade linux-image-aws-fips-5.15Upgrade linux-image-lowlatency-5.15Upgrade linux-image-raspi-5.15Upgrade linux-image-generic-6.14Upgrade linux-image-azure-fips-5.15Upgrade linux-image-5.15.0-156-fipsUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-6.8.0-100-genericUpgrade linux-image-aws-fipsUpgrade linux-image-aws-lts-24.04Upgrade linux-image-6.14.0-32-generic-64kUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-aws-fips-6.8Upgrade linux-image-6.14.0-1016-gcp-64kUpgrade linux-image-ibm-5.15Upgrade linux-image-generic-64k-5.15Upgrade linux-image-kvmUpgrade linux-image-oracle-6.14Upgrade linux-image-5.15.0-1089-gkeUpgrade linux-image-gcp-64kUpgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-5.15.0-156-generic-64kUpgrade linux-image-lowlatency-6.8Upgrade linux-image-aws-64k-6.14Upgrade linux-image-gcp-64k-6.8Upgrade linux-image-5.15.0-156-lowlatency-64kUpgrade linux-image-6.14.0-1013-oracle-64kUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-genericUpgrade linux-image-raspi-6.14Upgrade linux-image-realtime-6.8.1Upgrade linux-image-6.14.0-1013-aws-64kUpgrade linux-image-azure-lts-22.04Upgrade linux-image-oem-22.04dUpgrade linux-image-aws-6.8Upgrade linux-image-realtime-6.14Upgrade linux-image-virtual-5.15Upgrade linux-image-generic-5.15Upgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-azureUpgrade linux-image-azure-5.15Upgrade linux-image-xilinx-6.8Upgrade linux-image-virtual-6.14Upgrade linux-image-5.15.0-1088-kvmUpgrade linux-image-5.15.0-1092-realtimeUpgrade linux-image-aws-6.14Upgrade linux-image-gke-64k-6.8Upgrade linux-image-oracle-6.8Upgrade linux-image-oracle-5.15Upgrade linux-image-gke-6.8Upgrade linux-image-virtual-6.8Upgrade linux-image-oracle-64k-6.14Upgrade linux-image-gcp-64k-6.14Upgrade linux-image-intelUpgrade linux-image-6.14.0-1013-awsUpgrade linux-image-5.15.0-1092-gcp-fipsUpgrade linux-image-gke-64kUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-oem-22.04cUpgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-6.8.0-1046-awsUpgrade linux-image-gcp-fips-6.8Upgrade linux-image-5.15.0-1087-nvidia-lowlatencyUpgrade linux-image-nvidia-64kUpgrade linux-image-gcp-fips-5.15Upgrade linux-image-gkeop-5.15Upgrade linux-image-generic-64k-6.8Upgrade linux-image-5.15.0-1096-azure-fipsUpgrade linux-image-nvidia-6.8Upgrade linux-image-raspi-6.8Upgrade linux-image-gkeopUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-kvm-5.15Upgrade linux-image-nvidia-5.15Upgrade linux-image-nvidia-tegra-rtUpgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-nvidiaUpgrade linux-image-oem-24.04cUpgrade linux-image-5.15.0-1045-nvidia-tegra-rtUpgrade linux-image-5.15.0-1090-oracleUpgrade linux-image-6.14.0-1012-oemUpgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-6.14.0-1012-azureUpgrade linux-image-5.15.0-1045-nvidia-tegraUpgrade linux-image-azure-fips-6.8Upgrade linux-image-azure-6.8Upgrade linux-image-5.15.0-1092-aws-64kUpgrade linux-image-gcp-5.15Upgrade linux-image-aws-64kUpgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-5.15.0-1056-xilinx-zynqmpUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-fipsUpgrade linux-image-realtime-hwe-22.04Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-gcpUpgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-6.14.0-1012-realtimeUpgrade linux-image-ibm-6.8Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-ibmUpgrade linux-image-generic-lpaeUpgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-oem-24.04aUpgrade linux-image-oem-22.04Upgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-intel-iotgUpgrade linux-image-ibm-classicUpgrade linux-image-gke-5.15Upgrade linux-image-gkeUpgrade linux-image-generic-lpae-5.15Upgrade linux-image-azure-cvmUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-virtualUpgrade linux-image-5.15.0-1086-raspiUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-oem-22.04bUpgrade linux-image-fips-5.15Upgrade linux-image-6.14.0-1014-raspiUpgrade linux-image-5.15.0-156-genericUpgrade linux-image-5.15.0-1092-awsUpgrade linux-image-xilinxUpgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-gcp-6.8Upgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-6.14.0-32-genericUpgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-6.8.0-1046-azureUpgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-aws-lts-22.04Upgrade linux-image-aws-64k-6.8Upgrade linux-image-5.15.0-1092-aws-fipsUpgrade linux-image-5.15.0-1034-nvidia-tegra-igxUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-oem-24.04Upgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-intel-iot-realtimeUpgrade linux-image-gkeop-6.8Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-generic-6.8Upgrade linux-image-raspi-realtimeUpgrade linux-image-5.15.0-156-lowlatencyUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-fips-6.8Upgrade linux-image-generic-64k-6.14Upgrade linux-image-aws-5.15Upgrade linux-image-oem-6.14Upgrade linux-image-5.15.0-1092-gcpUpgrade linux-image-nvidia-tegra-igxUpgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-5.15.0-1087-nvidiaUpgrade linux-image-6.8.0-1051-azureUpgrade linux-image-realtimeUpgrade linux-image-5.15.0-1086-ibmUpgrade linux-image-lowlatencyUpgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-oem-24.04bUpgrade linux-image-azure-lts-24.04Upgrade linux-image-awsUpgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-6.8.0-100-fipsUpgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-6.14.0-1016-gcpUpgrade linux-image-5.15.0-1085-intel-iot-realtimeUpgrade linux-image-intel-iotg-5.15Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-aws-64k-5.15Upgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-6.14.0-1013-oracleUpgrade linux-image-5.15.0-156-generic-lpaeUpgrade linux-image-5.15.0-1087-intel-iotgUpgrade linux-image-5.15.0-1075-gkeopUpgrade linux-image-5.15.0-1034-nvidia-tegra-igx-rtUpgrade linux-image-raspi-nolpaeUpgrade linux-image-oracle-64kUpgrade linux-image-oracleUpgrade linux-image-oem-22.04aUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-lowlatency-64k | Jul 7, 2025 | Jul 3, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jul 16, 2025 | Jul 3, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub