In the Linux kernel, the following vulnerability has been resolved:
bnxt: properly flush XDP redirect lists
We encountered following crash when testing a XDP_REDIRECT feature in production:
[56251.579676] list_add corruption. next->prev should be prev (ffff93120dd40f30), but was ffffb301ef3a6740. (next=ffff93120dd 40f30). [56251.601413] ------------[ cut here ]------------ [56251.611357] kernel BUG at lib/list_debug.c:29! [56251.621082] Oops: invalid opcode: 0000 [#1] PREEMPT SMP NOPTI [56251.632073] CPU: 111 UID: 0 PID: 0 Comm: swapper/111 Kdump: loaded Tainted: P O 6.12.33-cloudflare-2025.6. 3 #1 [56251.653155] Tainted: [P]=PROPRIETARY_MODULE, [O]=OOT_MODULE [56251.663877] Hardware name: MiTAC GC68B-B8032-G11P6-GPU/S8032GM-HE-CFR, BIOS V7.020.B10-sig 01/22/2025 [56251.682626] RIP: 0010:__list_add_valid_or_report+0x4b/0xa0 [56251.693203] Code: 0e 48 c7 c7 68 e7 d9 97 e8 42 16 fe ff 0f 0b 48 8b 52 08 48 39 c2 74 14 48 89 f1 48 c7 c7 90 e7 d9 97 48 89 c6 e8 25 16 fe ff <0f> 0b 4c 8b 02 49 39 f0 74 14 48 89 d1 48 c7 c7 e8 e7 d9 97 4c 89 [56251.725811] RSP: 0018:ffff93120dd40b80 EFLAGS: 00010246 [56251.736094] RAX: 0000000000000075 RBX: ffffb301e6bba9d8 RCX: 0000000000000000 [56251.748260] RDX: 0000000000000000 RSI: ffff9149afda0b80 RDI: ffff9149afda0b80 [56251.760349] RBP: ffff9131e49c8000 R08: 0000000000000000 R09: ffff93120dd40a18 [56251.772382] R10: ffff9159cf2ce1a8 R11: 0000000000000003 R12: ffff911a80850000 [56251.784364] R13: ffff93120fbc7000 R14: 0000000000000010 R15: ffff9139e7510e40 [56251.796278] FS: 0000000000000000(0000) GS:ffff9149afd80000(0000) knlGS:0000000000000000 [56251.809133] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [56251.819561] CR2: 00007f5e85e6f300 CR3: 00000038b85e2006 CR4: 0000000000770ef0 [56251.831365] PKRU: 55555554 [56251.838653] Call Trace: [56251.845560] <IRQ> [56251.851943] cpu_map_enqueue.cold+0x5/0xa [56251.860243] xdp_do_redirect+0x2d9/0x480 [56251.868388] bnxt_rx_xdp+0x1d8/0x4c0 [bnxt_en] [56251.877028] bnxt_rx_pkt+0x5f7/0x19b0 [bnxt_en] [56251.885665] ? cpu_max_write+0x1e/0x100 [56251.893510] ? srso_alias_return_thunk+0x5/0xfbef5 [56251.902276] __bnxt_poll_work+0x190/0x340 [bnxt_en] [56251.911058] bnxt_poll+0xab/0x1b0 [bnxt_en] [56251.919041] ? srso_alias_return_thunk+0x5/0xfbef5 [56251.927568] ? srso_alias_return_thunk+0x5/0xfbef5 [56251.935958] ? srso_alias_return_thunk+0x5/0xfbef5 [56251.944250] __napi_poll+0x2b/0x160 [56251.951155] bpf_trampoline_6442548651+0x79/0x123 [56251.959262] __napi_poll+0x5/0x160 [56251.966037] net_rx_action+0x3d2/0x880 [56251.973133] ? srso_alias_return_thunk+0x5/0xfbef5 [56251.981265] ? srso_alias_return_thunk+0x5/0xfbef5 [56251.989262] ? __hrtimer_run_queues+0x162/0x2a0 [56251.996967] ? srso_alias_return_thunk+0x5/0xfbef5 [56252.004875] ? srso_alias_return_thunk+0x5/0xfbef5 [56252.012673] ? bnxt_msix+0x62/0x70 [bnxt_en] [56252.019903] handle_softirqs+0xcf/0x270 [56252.026650] irq_exit_rcu+0x67/0x90 [56252.032933] common_interrupt+0x85/0xa0 [56252.039498] </IRQ> [56252.044246] <TASK> [56252.048935] asm_common_interrupt+0x26/0x40 [56252.055727] RIP: 0010:cpuidle_enter_state+0xb8/0x420 [56252.063305] Code: dc 01 00 00 e8 f9 79 3b ff e8 64 f7 ff ff 49 89 c5 0f 1f 44 00 00 31 ff e8 a5 32 3a ff 45 84 ff 0f 85 ae 01 00 00 fb 45 85 f6 <0f> 88 88 01 00 00 48 8b 04 24 49 63 ce 4c 89 ea 48 6b f1 68 48 29 [56252.088911] RSP: 0018:ffff93120c97fe98 EFLAGS: 00000202 [56252.096912] RAX: ffff9149afd80000 RBX: ffff9141d3a72800 RCX: 0000000000000000 [56252.106844] RDX: 00003329176c6b98 RSI: ffffffe36db3fdc7 RDI: 0000000000000000 [56252.116733] RBP: 0000000000000002 R08: 0000000000000002 R09: 000000000000004e [56252.126652] R10: ffff9149afdb30c4 R11: 071c71c71c71c71c R12: ffffffff985ff860 [56252.136637] R13: 00003329176c6b98 R14: 0000000000000002 R15: 0000000000000000 [56252.146667] ? cpuidle_enter_state+0xab/0x420 [56252.153909] cpuidle_enter+0x2d/0x40 [56252.160360] do_idle+0x176/0x1c0 [56252.166456 ---truncated---
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linuxNo solution exists | Jul 10, 2025 | Jul 10, 2025 |
| Oracle_linux | — | Upgrade kernel-uek | May 13, 2026 | Jul 9, 2025 |
| Redhat_linux | — | No solution exists | Jul 10, 2025 | Jul 9, 2025 |
| Suse | — | Upgrade dtb-appleUpgrade kernel-azureUpgrade kernel-docs-htmlUpgrade kernel-source-vanillaUpgrade kernel-default-develUpgrade kselftests-kmp-azureUpgrade gfs2-kmp-azureUpgrade reiserfs-kmp-defaultUpgrade reiserfs-kmp-64kbUpgrade dtb-allwinnerUpgrade kernel-rt_debug-develUpgrade dtb-lgUpgrade dtb-freescaleUpgrade kernel-64kbUpgrade gfs2-kmp-rtUpgrade kernel-syms-azureUpgrade kernel-devel-azureUpgrade kselftests-kmp-64kbUpgrade kernel-default-vdsoUpgrade kernel-kvmsmallUpgrade kernel-zfcpdumpUpgrade ocfs2-kmp-rtUpgrade kernel-default-livepatchUpgrade kernel-kvmsmall-vdsoUpgrade kernel-source-azureUpgrade ocfs2-kmp-azureUpgrade kernel-debug-vdsoUpgrade kernel-debug-develUpgrade kernel-azure-extraUpgrade ocfs2-kmp-defaultUpgrade dtb-exynosUpgrade kernel-rt_debugUpgrade gfs2-kmp-64kbUpgrade kernel-source-rtUpgrade dtb-broadcomUpgrade ocfs2-kmp-64kbUpgrade dtb-hisiliconUpgrade gfs2-kmp-defaultUpgrade kernel-64kb-optionalUpgrade kernel-kvmsmall-develUpgrade dtb-amazonUpgrade dtb-amdUpgrade dtb-alteraUpgrade kernel-debugUpgrade cluster-md-kmp-rtUpgrade dtb-caviumUpgrade kernel-azure-optionalUpgrade kernel-rt-optionalUpgrade dtb-marvellUpgrade kernel-rt-vdsoUpgrade kernel-sourceUpgrade dlm-kmp-64kbUpgrade cluster-md-kmp-azureUpgrade kernel-default-baseUpgrade kernel-obs-buildUpgrade kernel-symsUpgrade cluster-md-kmp-64kbUpgrade kselftests-kmp-defaultUpgrade kernel-obs-qaUpgrade kernel-azure-vdsoUpgrade kernel-azure-develUpgrade dtb-renesasUpgrade kselftests-kmp-rtUpgrade kernel-docsUpgrade kernel-64kb-develUpgrade kernel-default-livepatch-develUpgrade kernel-rt-develUpgrade kernel-default-optionalUpgrade kernel-devel-rtUpgrade dlm-kmp-azureUpgrade cluster-md-kmp-defaultUpgrade reiserfs-kmp-azureUpgrade kernel-rt-livepatch-develUpgrade kernel-macrosUpgrade dtb-nvidiaUpgrade kernel-rt_debug-vdsoUpgrade dtb-armUpgrade reiserfs-kmp-rtUpgrade kernel-rtUpgrade kernel-default-base-rebuildUpgrade dtb-xilinxUpgrade dtb-socionextUpgrade kernel-rt-livepatchUpgrade dtb-sprdUpgrade dtb-rockchipUpgrade dtb-qcomUpgrade dtb-apmUpgrade dlm-kmp-rtUpgrade kernel-defaultUpgrade kernel-develUpgrade kernel-default-extraUpgrade kernel-syms-rtUpgrade kernel-rt-extraUpgrade kernel-64kb-extraUpgrade dtb-mediatekUpgrade dtb-amlogicUpgrade dlm-kmp-default | Dec 5, 2025 | Aug 18, 2025 |
| Ubuntu | — | Upgrade linux-image-aws-64k-6.14Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.14.0-1015-oracleUpgrade linux-image-6.14.0-34-generic-64kUpgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-6.14.0-34-genericUpgrade linux-image-6.14.0-1015-awsUpgrade linux-image-oem-22.04dUpgrade linux-image-realtime-6.8.1Upgrade linux-image-gke-64kUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-gcp-6.8Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-aws-6.8Upgrade linux-image-realtimeUpgrade linux-image-awsUpgrade linux-image-oem-24.04aUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-gke-6.8Upgrade linux-image-aws-6.14Upgrade linux-image-oem-24.04cUpgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-6.8.0-1046-awsUpgrade linux-image-raspi-6.8Upgrade linux-image-virtual-6.14Upgrade linux-image-virtual-6.8Upgrade linux-image-6.14.0-1016-raspiUpgrade linux-image-aws-64kUpgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-generic-64k-6.14Upgrade linux-image-6.14.0-1014-oemUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-nvidia-6.8Upgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-6.14.0-1014-azureUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-gkeUpgrade linux-image-aws-lts-24.04Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-generic-6.14Upgrade linux-image-gcp-fipsUpgrade linux-image-kvmUpgrade linux-image-gcp-64kUpgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-aws-fipsUpgrade linux-image-oracle-6.8Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-aws-fips-6.8Upgrade linux-image-gcp-6.14Upgrade linux-image-nvidia-64kUpgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-raspi-6.14Upgrade linux-image-azureUpgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-6.14.0-1007-azure-nvidiaUpgrade linux-image-gcp-64k-6.14Upgrade linux-image-gke-64k-6.8Upgrade linux-image-azure-6.8Upgrade linux-image-intel-iotgUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-6.14.0-1018-gcp-64kUpgrade linux-image-xilinx-6.8Upgrade linux-image-oem-22.04cUpgrade linux-image-oracle-64kUpgrade linux-image-raspiUpgrade linux-image-realtime-6.14Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-oem-24.04Upgrade linux-image-lowlatency-6.8Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-azure-nvidia-6.14Upgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-nvidiaUpgrade linux-image-gcp-fips-6.8Upgrade linux-image-aws-64k-6.8Upgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-genericUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-generic-6.8Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-oem-6.14Upgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-6.14.0-1018-gcpUpgrade linux-image-6.8.0-100-fipsUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-raspi-realtimeUpgrade linux-image-fips-6.8Upgrade linux-image-xilinxUpgrade linux-image-azure-fipsUpgrade linux-image-virtualUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-intel-iot-realtimeUpgrade linux-image-ibm-classicUpgrade linux-image-oem-22.04bUpgrade linux-image-azure-fips-6.8Upgrade linux-image-oracleUpgrade linux-image-oem-22.04Upgrade linux-image-fipsUpgrade linux-image-azure-nvidiaUpgrade linux-image-azure-6.14Upgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-oem-22.04aUpgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-ibmUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-6.14.0-1015-oracle-64kUpgrade linux-image-realtime-hwe-22.04Upgrade linux-image-raspi-realtime-6.8Upgrade linux-image-oracle-64k-6.8Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-lowlatencyUpgrade linux-image-ibm-6.8Upgrade linux-image-gkeopUpgrade linux-image-generic-lpaeUpgrade linux-image-azure-lts-24.04Upgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-6.14.0-1014-realtimeUpgrade linux-image-6.8.0-100-genericUpgrade linux-image-oracle-6.14Upgrade linux-image-oem-24.04bUpgrade linux-image-lowlatency-64kUpgrade linux-image-generic-64k-6.8Upgrade linux-image-gcpUpgrade linux-image-6.8.0-1051-azureUpgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-generic-64kUpgrade linux-image-6.8.0-1046-azureUpgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-6.14.0-1015-aws-64kUpgrade linux-image-oracle-64k-6.14Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-gkeop-6.8 | Jul 14, 2025 | Jul 9, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 14, 2025 | Jul 9, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub