In the Linux kernel, the following vulnerability has been resolved:
bnxt: properly flush XDP redirect lists
We encountered following crash when testing a XDP_REDIRECT feature in production:
[56251.579676] list_add corruption. next->prev should be prev (ffff93120dd40f30), but was ffffb301ef3a6740. (next=ffff93120dd 40f30). [56251.601413] ------------[ cut here ]------------ [56251.611357] kernel BUG at lib/list_debug.c:29! [56251.621082] Oops: invalid opcode: 0000 [#1] PREEMPT SMP NOPTI [56251.632073] CPU: 111 UID: 0 PID: 0 Comm: swapper/111 Kdump: loaded Tainted: P O 6.12.33-cloudflare-2025.6. 3 #1 [56251.653155] Tainted: [P]=PROPRIETARY_MODULE, [O]=OOT_MODULE [56251.663877] Hardware name: MiTAC GC68B-B8032-G11P6-GPU/S8032GM-HE-CFR, BIOS V7.020.B10-sig 01/22/2025 [56251.682626] RIP: 0010:__list_add_valid_or_report+0x4b/0xa0 [56251.693203] Code: 0e 48 c7 c7 68 e7 d9 97 e8 42 16 fe ff 0f 0b 48 8b 52 08 48 39 c2 74 14 48 89 f1 48 c7 c7 90 e7 d9 97 48 89 c6 e8 25 16 fe ff <0f> 0b 4c 8b 02 49 39 f0 74 14 48 89 d1 48 c7 c7 e8 e7 d9 97 4c 89 [56251.725811] RSP: 0018:ffff93120dd40b80 EFLAGS: 00010246 [56251.736094] RAX: 0000000000000075 RBX: ffffb301e6bba9d8 RCX: 0000000000000000 [56251.748260] RDX: 0000000000000000 RSI: ffff9149afda0b80 RDI: ffff9149afda0b80 [56251.760349] RBP: ffff9131e49c8000 R08: 0000000000000000 R09: ffff93120dd40a18 [56251.772382] R10: ffff9159cf2ce1a8 R11: 0000000000000003 R12: ffff911a80850000 [56251.784364] R13: ffff93120fbc7000 R14: 0000000000000010 R15: ffff9139e7510e40 [56251.796278] FS: 0000000000000000(0000) GS:ffff9149afd80000(0000) knlGS:0000000000000000 [56251.809133] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [56251.819561] CR2: 00007f5e85e6f300 CR3: 00000038b85e2006 CR4: 0000000000770ef0 [56251.831365] PKRU: 55555554 [56251.838653] Call Trace: [56251.845560] <IRQ> [56251.851943] cpu_map_enqueue.cold+0x5/0xa [56251.860243] xdp_do_redirect+0x2d9/0x480 [56251.868388] bnxt_rx_xdp+0x1d8/0x4c0 [bnxt_en] [56251.877028] bnxt_rx_pkt+0x5f7/0x19b0 [bnxt_en] [56251.885665] ? cpu_max_write+0x1e/0x100 [56251.893510] ? srso_alias_return_thunk+0x5/0xfbef5 [56251.902276] __bnxt_poll_work+0x190/0x340 [bnxt_en] [56251.911058] bnxt_poll+0xab/0x1b0 [bnxt_en] [56251.919041] ? srso_alias_return_thunk+0x5/0xfbef5 [56251.927568] ? srso_alias_return_thunk+0x5/0xfbef5 [56251.935958] ? srso_alias_return_thunk+0x5/0xfbef5 [56251.944250] __napi_poll+0x2b/0x160 [56251.951155] bpf_trampoline_6442548651+0x79/0x123 [56251.959262] __napi_poll+0x5/0x160 [56251.966037] net_rx_action+0x3d2/0x880 [56251.973133] ? srso_alias_return_thunk+0x5/0xfbef5 [56251.981265] ? srso_alias_return_thunk+0x5/0xfbef5 [56251.989262] ? __hrtimer_run_queues+0x162/0x2a0 [56251.996967] ? srso_alias_return_thunk+0x5/0xfbef5 [56252.004875] ? srso_alias_return_thunk+0x5/0xfbef5 [56252.012673] ? bnxt_msix+0x62/0x70 [bnxt_en] [56252.019903] handle_softirqs+0xcf/0x270 [56252.026650] irq_exit_rcu+0x67/0x90 [56252.032933] common_interrupt+0x85/0xa0 [56252.039498] </IRQ> [56252.044246] <TASK> [56252.048935] asm_common_interrupt+0x26/0x40 [56252.055727] RIP: 0010:cpuidle_enter_state+0xb8/0x420 [56252.063305] Code: dc 01 00 00 e8 f9 79 3b ff e8 64 f7 ff ff 49 89 c5 0f 1f 44 00 00 31 ff e8 a5 32 3a ff 45 84 ff 0f 85 ae 01 00 00 fb 45 85 f6 <0f> 88 88 01 00 00 48 8b 04 24 49 63 ce 4c 89 ea 48 6b f1 68 48 29 [56252.088911] RSP: 0018:ffff93120c97fe98 EFLAGS: 00000202 [56252.096912] RAX: ffff9149afd80000 RBX: ffff9141d3a72800 RCX: 0000000000000000 [56252.106844] RDX: 00003329176c6b98 RSI: ffffffe36db3fdc7 RDI: 0000000000000000 [56252.116733] RBP: 0000000000000002 R08: 0000000000000002 R09: 000000000000004e [56252.126652] R10: ffff9149afdb30c4 R11: 071c71c71c71c71c R12: ffffffff985ff860 [56252.136637] R13: 00003329176c6b98 R14: 0000000000000002 R15: 0000000000000000 [56252.146667] ? cpuidle_enter_state+0xab/0x420 [56252.153909] cpuidle_enter+0x2d/0x40 [56252.160360] do_idle+0x176/0x1c0 [56252.166456 ---truncated---
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | No solution existsUpgrade linux | Jul 10, 2025 | Jul 10, 2025 |
| Oracle_linux | — | Upgrade kernel-uek | May 13, 2026 | Jul 9, 2025 |
| Redhat_linux | — | No solution exists | Jul 10, 2025 | Jul 9, 2025 |
| Suse | — | Upgrade kernel-source-rtUpgrade kernel-zfcpdumpUpgrade kernel-source-azureUpgrade ocfs2-kmp-azureUpgrade gfs2-kmp-64kbUpgrade kernel-debug-develUpgrade kernel-debug-vdsoUpgrade ocfs2-kmp-rtUpgrade kselftests-kmp-azureUpgrade kernel-default-develUpgrade kernel-64kbUpgrade kernel-rt_debug-develUpgrade kselftests-kmp-64kbUpgrade ocfs2-kmp-defaultUpgrade dtb-broadcomUpgrade gfs2-kmp-azureUpgrade kernel-azure-extraUpgrade dtb-amazonUpgrade dtb-marvellUpgrade dlm-kmp-64kbUpgrade kernel-kvmsmall-vdsoUpgrade dtb-exynosUpgrade gfs2-kmp-rtUpgrade dtb-freescaleUpgrade kernel-default-vdsoUpgrade kernel-devel-azureUpgrade kernel-docs-htmlUpgrade dtb-allwinnerUpgrade reiserfs-kmp-defaultUpgrade dtb-appleUpgrade kernel-azureUpgrade dtb-lgUpgrade kernel-syms-azureUpgrade dtb-caviumUpgrade kernel-rt_debugUpgrade cluster-md-kmp-azureUpgrade kernel-64kb-optionalUpgrade kernel-kvmsmall-develUpgrade kernel-source-vanillaUpgrade reiserfs-kmp-64kbUpgrade cluster-md-kmp-rtUpgrade ocfs2-kmp-64kbUpgrade kernel-debugUpgrade dtb-alteraUpgrade kernel-default-livepatchUpgrade kernel-kvmsmallUpgrade dtb-hisiliconUpgrade dtb-amdUpgrade gfs2-kmp-defaultUpgrade kernel-rt-optionalUpgrade kernel-rt-vdsoUpgrade kernel-azure-optionalUpgrade kernel-sourceUpgrade dtb-nvidiaUpgrade kernel-rt-livepatch-develUpgrade kernel-macrosUpgrade kernel-rt_debug-vdsoUpgrade dtb-qcomUpgrade kernel-rt-livepatchUpgrade dtb-sprdUpgrade kernel-devel-rtUpgrade kernel-64kb-develUpgrade dlm-kmp-azureUpgrade cluster-md-kmp-defaultUpgrade reiserfs-kmp-azureUpgrade kernel-default-optionalUpgrade kernel-syms-rtUpgrade kernel-rtUpgrade dtb-armUpgrade reiserfs-kmp-rtUpgrade kernel-default-base-rebuildUpgrade dtb-xilinxUpgrade kernel-docsUpgrade kernel-azure-vdsoUpgrade kernel-azure-develUpgrade dtb-renesasUpgrade kselftests-kmp-rtUpgrade kernel-symsUpgrade kernel-rt-extraUpgrade dtb-mediatekUpgrade dtb-amlogicUpgrade dlm-kmp-defaultUpgrade kernel-64kb-extraUpgrade dtb-socionextUpgrade kernel-obs-buildUpgrade cluster-md-kmp-64kbUpgrade kselftests-kmp-defaultUpgrade kernel-default-baseUpgrade kernel-obs-qaUpgrade kernel-default-livepatch-develUpgrade kernel-rt-develUpgrade kernel-defaultUpgrade dtb-rockchipUpgrade dtb-apmUpgrade dlm-kmp-rtUpgrade kernel-develUpgrade kernel-default-extra | Dec 5, 2025 | Aug 18, 2025 |
| Ubuntu | — | Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-gkeop-6.8Upgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-generic-lpaeUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-oracleUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-ibm-classicUpgrade linux-image-oem-6.14Upgrade linux-image-intel-iot-realtimeUpgrade linux-image-azure-fipsUpgrade linux-image-virtualUpgrade linux-image-azure-nvidia-6.14Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-6.14.0-1018-gcpUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-azure-6.14Upgrade linux-image-raspi-realtime-6.8Upgrade linux-image-ibmUpgrade linux-image-oem-22.04aUpgrade linux-image-azure-fips-6.8Upgrade linux-image-raspi-realtimeUpgrade linux-image-aws-64k-6.8Upgrade linux-image-gcp-fips-6.8Upgrade linux-image-6.14.0-1015-aws-64kUpgrade linux-image-6.8.0-1046-azureUpgrade linux-image-oem-22.04Upgrade linux-image-xilinxUpgrade linux-image-fipsUpgrade linux-image-azure-nvidiaUpgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-oracle-64k-6.14Upgrade linux-image-generic-6.8Upgrade linux-image-genericUpgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-6.8.0-100-fipsUpgrade linux-image-nvidiaUpgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-realtime-hwe-22.04Upgrade linux-image-6.14.0-1015-oracle-64kUpgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-oracle-6.14Upgrade linux-image-6.14.0-1014-realtimeUpgrade linux-image-oem-24.04bUpgrade linux-image-6.8.0-100-genericUpgrade linux-image-oem-22.04bUpgrade linux-image-fips-6.8Upgrade linux-image-generic-64kUpgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-azure-lts-24.04Upgrade linux-image-lowlatencyUpgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-ibm-6.8Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1051-azureUpgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-gkeopUpgrade linux-image-gcpUpgrade linux-image-lowlatency-64kUpgrade linux-image-generic-64k-6.8Upgrade linux-image-oem-22.04cUpgrade linux-image-6.8.0-1046-awsUpgrade linux-image-gkeUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-azureUpgrade linux-image-aws-lts-24.04Upgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-nvidia-64kUpgrade linux-image-generic-6.14Upgrade linux-image-6.14.0-34-genericUpgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-gcp-64kUpgrade linux-image-aws-fips-6.8Upgrade linux-image-kvmUpgrade linux-image-gcp-fipsUpgrade linux-image-oem-24.04Upgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-azure-6.8Upgrade linux-image-6.14.0-1018-gcp-64kUpgrade linux-image-realtime-6.14Upgrade linux-image-xilinx-6.8Upgrade linux-image-realtime-hwe-24.04Upgrade linux-image-intel-iotgUpgrade linux-image-gke-64k-6.8Upgrade linux-image-raspiUpgrade linux-image-lowlatency-6.8Upgrade linux-image-oracle-64kUpgrade linux-image-gcp-64k-6.14Upgrade linux-image-6.14.0-34-generic-64kUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.14.0-1015-oracleUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.14.0-1015-awsUpgrade linux-image-oem-22.04dUpgrade linux-image-realtime-6.8.1Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-aws-64k-6.14Upgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-raspi-6.8Upgrade linux-image-gke-64kUpgrade linux-image-oem-24.04cUpgrade linux-image-gke-6.8Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-aws-6.8Upgrade linux-image-aws-6.14Upgrade linux-image-virtual-6.8Upgrade linux-image-6.14.0-1016-raspiUpgrade linux-image-realtimeUpgrade linux-image-aws-64kUpgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-virtual-6.14Upgrade linux-image-oem-24.04aUpgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-awsUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-gcp-6.8Upgrade linux-image-6.14.0-1007-azure-nvidiaUpgrade linux-image-nvidia-6.8Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-raspi-6.14Upgrade linux-image-generic-64k-6.14Upgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-oracle-6.8Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-gcp-64k-6.8Upgrade linux-image-gcp-6.14Upgrade linux-image-aws-fipsUpgrade linux-image-6.14.0-1014-oemUpgrade linux-image-6.14.0-1014-azure | Jul 14, 2025 | Jul 9, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 14, 2025 | Jul 9, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub