In the Linux kernel, the following vulnerability has been resolved:
bnxt: properly flush XDP redirect lists
We encountered following crash when testing a XDP_REDIRECT feature in production:
[56251.579676] list_add corruption. next->prev should be prev (ffff93120dd40f30), but was ffffb301ef3a6740. (next=ffff93120dd 40f30). [56251.601413] ------------[ cut here ]------------ [56251.611357] kernel BUG at lib/list_debug.c:29! [56251.621082] Oops: invalid opcode: 0000 [#1] PREEMPT SMP NOPTI [56251.632073] CPU: 111 UID: 0 PID: 0 Comm: swapper/111 Kdump: loaded Tainted: P O 6.12.33-cloudflare-2025.6. 3 #1 [56251.653155] Tainted: [P]=PROPRIETARY_MODULE, [O]=OOT_MODULE [56251.663877] Hardware name: MiTAC GC68B-B8032-G11P6-GPU/S8032GM-HE-CFR, BIOS V7.020.B10-sig 01/22/2025 [56251.682626] RIP: 0010:__list_add_valid_or_report+0x4b/0xa0 [56251.693203] Code: 0e 48 c7 c7 68 e7 d9 97 e8 42 16 fe ff 0f 0b 48 8b 52 08 48 39 c2 74 14 48 89 f1 48 c7 c7 90 e7 d9 97 48 89 c6 e8 25 16 fe ff <0f> 0b 4c 8b 02 49 39 f0 74 14 48 89 d1 48 c7 c7 e8 e7 d9 97 4c 89 [56251.725811] RSP: 0018:ffff93120dd40b80 EFLAGS: 00010246 [56251.736094] RAX: 0000000000000075 RBX: ffffb301e6bba9d8 RCX: 0000000000000000 [56251.748260] RDX: 0000000000000000 RSI: ffff9149afda0b80 RDI: ffff9149afda0b80 [56251.760349] RBP: ffff9131e49c8000 R08: 0000000000000000 R09: ffff93120dd40a18 [56251.772382] R10: ffff9159cf2ce1a8 R11: 0000000000000003 R12: ffff911a80850000 [56251.784364] R13: ffff93120fbc7000 R14: 0000000000000010 R15: ffff9139e7510e40 [56251.796278] FS: 0000000000000000(0000) GS:ffff9149afd80000(0000) knlGS:0000000000000000 [56251.809133] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [56251.819561] CR2: 00007f5e85e6f300 CR3: 00000038b85e2006 CR4: 0000000000770ef0 [56251.831365] PKRU: 55555554 [56251.838653] Call Trace: [56251.845560] <IRQ> [56251.851943] cpu_map_enqueue.cold+0x5/0xa [56251.860243] xdp_do_redirect+0x2d9/0x480 [56251.868388] bnxt_rx_xdp+0x1d8/0x4c0 [bnxt_en] [56251.877028] bnxt_rx_pkt+0x5f7/0x19b0 [bnxt_en] [56251.885665] ? cpu_max_write+0x1e/0x100 [56251.893510] ? srso_alias_return_thunk+0x5/0xfbef5 [56251.902276] __bnxt_poll_work+0x190/0x340 [bnxt_en] [56251.911058] bnxt_poll+0xab/0x1b0 [bnxt_en] [56251.919041] ? srso_alias_return_thunk+0x5/0xfbef5 [56251.927568] ? srso_alias_return_thunk+0x5/0xfbef5 [56251.935958] ? srso_alias_return_thunk+0x5/0xfbef5 [56251.944250] __napi_poll+0x2b/0x160 [56251.951155] bpf_trampoline_6442548651+0x79/0x123 [56251.959262] __napi_poll+0x5/0x160 [56251.966037] net_rx_action+0x3d2/0x880 [56251.973133] ? srso_alias_return_thunk+0x5/0xfbef5 [56251.981265] ? srso_alias_return_thunk+0x5/0xfbef5 [56251.989262] ? __hrtimer_run_queues+0x162/0x2a0 [56251.996967] ? srso_alias_return_thunk+0x5/0xfbef5 [56252.004875] ? srso_alias_return_thunk+0x5/0xfbef5 [56252.012673] ? bnxt_msix+0x62/0x70 [bnxt_en] [56252.019903] handle_softirqs+0xcf/0x270 [56252.026650] irq_exit_rcu+0x67/0x90 [56252.032933] common_interrupt+0x85/0xa0 [56252.039498] </IRQ> [56252.044246] <TASK> [56252.048935] asm_common_interrupt+0x26/0x40 [56252.055727] RIP: 0010:cpuidle_enter_state+0xb8/0x420 [56252.063305] Code: dc 01 00 00 e8 f9 79 3b ff e8 64 f7 ff ff 49 89 c5 0f 1f 44 00 00 31 ff e8 a5 32 3a ff 45 84 ff 0f 85 ae 01 00 00 fb 45 85 f6 <0f> 88 88 01 00 00 48 8b 04 24 49 63 ce 4c 89 ea 48 6b f1 68 48 29 [56252.088911] RSP: 0018:ffff93120c97fe98 EFLAGS: 00000202 [56252.096912] RAX: ffff9149afd80000 RBX: ffff9141d3a72800 RCX: 0000000000000000 [56252.106844] RDX: 00003329176c6b98 RSI: ffffffe36db3fdc7 RDI: 0000000000000000 [56252.116733] RBP: 0000000000000002 R08: 0000000000000002 R09: 000000000000004e [56252.126652] R10: ffff9149afdb30c4 R11: 071c71c71c71c71c R12: ffffffff985ff860 [56252.136637] R13: 00003329176c6b98 R14: 0000000000000002 R15: 0000000000000000 [56252.146667] ? cpuidle_enter_state+0xab/0x420 [56252.153909] cpuidle_enter+0x2d/0x40 [56252.160360] do_idle+0x176/0x1c0 [56252.166456 ---truncated---
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 10, 2025 | Jul 10, 2025 |
| Oracle_linux | — | Upgrade kernel-uek | May 13, 2026 | Jul 9, 2025 |
| Redhat_linux | — | No solution exists | Jul 10, 2025 | Jul 9, 2025 |
| Suse | — | Upgrade dtb-apmUpgrade dtb-qcomUpgrade kernel-default-extraUpgrade kernel-defaultUpgrade kernel-develUpgrade kernel-azure-vdsoUpgrade dlm-kmp-rtUpgrade dtb-rockchipUpgrade kernel-obs-qaUpgrade kernel-azure-develUpgrade kernel-obs-buildUpgrade kernel-docsUpgrade kernel-rt-develUpgrade kernel-default-optionalUpgrade kernel-default-baseUpgrade kernel-symsUpgrade dtb-xilinxUpgrade kernel-default-base-rebuildUpgrade reiserfs-kmp-rtUpgrade dtb-socionextUpgrade kernel-default-livepatch-develUpgrade kselftests-kmp-rtUpgrade dtb-renesasUpgrade dtb-sprdUpgrade kernel-rt_debug-vdsoUpgrade dtb-nvidiaUpgrade cluster-md-kmp-64kbUpgrade cluster-md-kmp-defaultUpgrade kernel-64kb-develUpgrade kernel-rt-livepatchUpgrade kernel-rtUpgrade kernel-64kb-extraUpgrade kernel-macrosUpgrade dtb-mediatekUpgrade kernel-rt-livepatch-develUpgrade kernel-syms-rtUpgrade dlm-kmp-defaultUpgrade reiserfs-kmp-azureUpgrade dtb-armUpgrade dlm-kmp-azureUpgrade kernel-rt-extraUpgrade dtb-amlogicUpgrade kernel-devel-rtUpgrade kselftests-kmp-defaultUpgrade kernel-zfcpdumpUpgrade dtb-marvellUpgrade kernel-rt-optionalUpgrade kernel-debug-develUpgrade dtb-freescaleUpgrade kernel-azure-optionalUpgrade dtb-amdUpgrade dtb-amazonUpgrade dlm-kmp-64kbUpgrade kernel-sourceUpgrade kernel-rt-vdsoUpgrade reiserfs-kmp-defaultUpgrade kernel-default-vdsoUpgrade dtb-lgUpgrade dtb-allwinnerUpgrade reiserfs-kmp-64kbUpgrade kernel-devel-azureUpgrade dtb-alteraUpgrade cluster-md-kmp-rtUpgrade cluster-md-kmp-azureUpgrade kernel-64kbUpgrade gfs2-kmp-azureUpgrade kselftests-kmp-azureUpgrade kselftests-kmp-64kbUpgrade dtb-caviumUpgrade kernel-rt_debug-develUpgrade kernel-default-develUpgrade gfs2-kmp-defaultUpgrade kernel-syms-azureUpgrade dtb-hisiliconUpgrade kernel-rt_debugUpgrade ocfs2-kmp-64kbUpgrade kernel-kvmsmall-develUpgrade kernel-debugUpgrade kernel-64kb-optionalUpgrade dtb-broadcomUpgrade ocfs2-kmp-defaultUpgrade kernel-docs-htmlUpgrade kernel-source-vanillaUpgrade kernel-azure-extraUpgrade ocfs2-kmp-rtUpgrade ocfs2-kmp-azureUpgrade kernel-source-rtUpgrade kernel-source-azureUpgrade kernel-debug-vdsoUpgrade gfs2-kmp-64kbUpgrade kernel-azureUpgrade dtb-appleUpgrade kernel-kvmsmallUpgrade kernel-default-livepatchUpgrade gfs2-kmp-rtUpgrade dtb-exynosUpgrade kernel-kvmsmall-vdso | Dec 5, 2025 | Aug 18, 2025 |
| Ubuntu | — | Upgrade linux-image-oracle-64k-6.14Upgrade linux-image-aws-64k-6.8Upgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-gcp-fips-6.8Upgrade linux-image-gkeop-6.8Upgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-genericUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-lowlatencyUpgrade linux-image-generic-lpaeUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-ibm-6.8Upgrade linux-image-azure-lts-24.04Upgrade linux-image-6.14.0-1015-oracle-64kUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-gkeopUpgrade linux-image-azure-nvidia-6.14Upgrade linux-image-oem-22.04bUpgrade linux-image-virtualUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-generic-64kUpgrade linux-image-oracle-6.14Upgrade linux-image-azure-fipsUpgrade linux-image-realtime-hwe-22.04Upgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-6.8.0-1051-azureUpgrade linux-image-gcpUpgrade linux-image-lowlatency-64kUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-azure-6.14Upgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-6.14.0-1014-realtimeUpgrade linux-image-oem-24.04bUpgrade linux-image-fips-6.8Upgrade linux-image-6.8.0-100-fipsUpgrade linux-image-ibm-classicUpgrade linux-image-generic-64k-6.8Upgrade linux-image-raspi-realtimeUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-6.14.0-1018-gcpUpgrade linux-image-ibmUpgrade linux-image-oem-22.04Upgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-6.14.0-1015-aws-64kUpgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-6.8.0-1046-azureUpgrade linux-image-fipsUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-oracleUpgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-azure-nvidiaUpgrade linux-image-oem-6.14Upgrade linux-image-xilinxUpgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-azure-fips-6.8Upgrade linux-image-generic-6.8Upgrade linux-image-6.8.0-100-genericUpgrade linux-image-oem-22.04aUpgrade linux-image-nvidiaUpgrade linux-image-realtime-6.14Upgrade linux-image-realtime-hwe-24.04Upgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-lowlatency-6.8Upgrade linux-image-oem-22.04cUpgrade linux-image-6.14.0-1015-oracleUpgrade linux-image-oem-22.04dUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-aws-64k-6.14Upgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-6.14.0-34-generic-64kUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.14.0-1015-awsUpgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-raspiUpgrade linux-image-oracle-64kUpgrade linux-image-xilinx-6.8Upgrade linux-image-intel-iotgUpgrade linux-image-gcp-64k-6.14Upgrade linux-image-gke-64k-6.8Upgrade linux-image-6.14.0-1018-gcp-64kUpgrade linux-image-azure-6.8Upgrade linux-image-realtime-6.8.1Upgrade linux-image-azureUpgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-generic-64k-6.14Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-awsUpgrade linux-image-oem-24.04aUpgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-virtual-6.14Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-gke-64kUpgrade linux-image-gcp-6.8Upgrade linux-image-oem-24.04Upgrade linux-image-aws-fips-6.8Upgrade linux-image-kvmUpgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-gcp-fipsUpgrade linux-image-gcp-64kUpgrade linux-image-gke-6.8Upgrade linux-image-aws-6.14Upgrade linux-image-aws-64kUpgrade linux-image-raspi-6.8Upgrade linux-image-oem-24.04cUpgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-6.8.0-1046-awsUpgrade linux-image-aws-6.8Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-virtual-6.8Upgrade linux-image-6.14.0-1016-raspiUpgrade linux-image-realtimeUpgrade linux-image-oracle-6.8Upgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-nvidia-6.8Upgrade linux-image-aws-lts-24.04Upgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-6.14.0-1007-azure-nvidiaUpgrade linux-image-raspi-6.14Upgrade linux-image-gcp-64k-6.8Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-gcp-6.14Upgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-6.14.0-1014-oemUpgrade linux-image-6.14.0-1014-azureUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-generic-6.14Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-gkeUpgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-nvidia-64kUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-aws-fipsUpgrade linux-image-6.14.0-34-generic | Jul 14, 2025 | Jul 9, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 14, 2025 | Jul 9, 2025 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub