In the Linux kernel, the following vulnerability has been resolved:
bnxt: properly flush XDP redirect lists
We encountered following crash when testing a XDP_REDIRECT feature in production:
[56251.579676] list_add corruption. next->prev should be prev (ffff93120dd40f30), but was ffffb301ef3a6740. (next=ffff93120dd 40f30). [56251.601413] ------------[ cut here ]------------ [56251.611357] kernel BUG at lib/list_debug.c:29! [56251.621082] Oops: invalid opcode: 0000 [#1] PREEMPT SMP NOPTI [56251.632073] CPU: 111 UID: 0 PID: 0 Comm: swapper/111 Kdump: loaded Tainted: P O 6.12.33-cloudflare-2025.6. 3 #1 [56251.653155] Tainted: [P]=PROPRIETARY_MODULE, [O]=OOT_MODULE [56251.663877] Hardware name: MiTAC GC68B-B8032-G11P6-GPU/S8032GM-HE-CFR, BIOS V7.020.B10-sig 01/22/2025 [56251.682626] RIP: 0010:__list_add_valid_or_report+0x4b/0xa0 [56251.693203] Code: 0e 48 c7 c7 68 e7 d9 97 e8 42 16 fe ff 0f 0b 48 8b 52 08 48 39 c2 74 14 48 89 f1 48 c7 c7 90 e7 d9 97 48 89 c6 e8 25 16 fe ff <0f> 0b 4c 8b 02 49 39 f0 74 14 48 89 d1 48 c7 c7 e8 e7 d9 97 4c 89 [56251.725811] RSP: 0018:ffff93120dd40b80 EFLAGS: 00010246 [56251.736094] RAX: 0000000000000075 RBX: ffffb301e6bba9d8 RCX: 0000000000000000 [56251.748260] RDX: 0000000000000000 RSI: ffff9149afda0b80 RDI: ffff9149afda0b80 [56251.760349] RBP: ffff9131e49c8000 R08: 0000000000000000 R09: ffff93120dd40a18 [56251.772382] R10: ffff9159cf2ce1a8 R11: 0000000000000003 R12: ffff911a80850000 [56251.784364] R13: ffff93120fbc7000 R14: 0000000000000010 R15: ffff9139e7510e40 [56251.796278] FS: 0000000000000000(0000) GS:ffff9149afd80000(0000) knlGS:0000000000000000 [56251.809133] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [56251.819561] CR2: 00007f5e85e6f300 CR3: 00000038b85e2006 CR4: 0000000000770ef0 [56251.831365] PKRU: 55555554 [56251.838653] Call Trace: [56251.845560] <IRQ> [56251.851943] cpu_map_enqueue.cold+0x5/0xa [56251.860243] xdp_do_redirect+0x2d9/0x480 [56251.868388] bnxt_rx_xdp+0x1d8/0x4c0 [bnxt_en] [56251.877028] bnxt_rx_pkt+0x5f7/0x19b0 [bnxt_en] [56251.885665] ? cpu_max_write+0x1e/0x100 [56251.893510] ? srso_alias_return_thunk+0x5/0xfbef5 [56251.902276] __bnxt_poll_work+0x190/0x340 [bnxt_en] [56251.911058] bnxt_poll+0xab/0x1b0 [bnxt_en] [56251.919041] ? srso_alias_return_thunk+0x5/0xfbef5 [56251.927568] ? srso_alias_return_thunk+0x5/0xfbef5 [56251.935958] ? srso_alias_return_thunk+0x5/0xfbef5 [56251.944250] __napi_poll+0x2b/0x160 [56251.951155] bpf_trampoline_6442548651+0x79/0x123 [56251.959262] __napi_poll+0x5/0x160 [56251.966037] net_rx_action+0x3d2/0x880 [56251.973133] ? srso_alias_return_thunk+0x5/0xfbef5 [56251.981265] ? srso_alias_return_thunk+0x5/0xfbef5 [56251.989262] ? __hrtimer_run_queues+0x162/0x2a0 [56251.996967] ? srso_alias_return_thunk+0x5/0xfbef5 [56252.004875] ? srso_alias_return_thunk+0x5/0xfbef5 [56252.012673] ? bnxt_msix+0x62/0x70 [bnxt_en] [56252.019903] handle_softirqs+0xcf/0x270 [56252.026650] irq_exit_rcu+0x67/0x90 [56252.032933] common_interrupt+0x85/0xa0 [56252.039498] </IRQ> [56252.044246] <TASK> [56252.048935] asm_common_interrupt+0x26/0x40 [56252.055727] RIP: 0010:cpuidle_enter_state+0xb8/0x420 [56252.063305] Code: dc 01 00 00 e8 f9 79 3b ff e8 64 f7 ff ff 49 89 c5 0f 1f 44 00 00 31 ff e8 a5 32 3a ff 45 84 ff 0f 85 ae 01 00 00 fb 45 85 f6 <0f> 88 88 01 00 00 48 8b 04 24 49 63 ce 4c 89 ea 48 6b f1 68 48 29 [56252.088911] RSP: 0018:ffff93120c97fe98 EFLAGS: 00000202 [56252.096912] RAX: ffff9149afd80000 RBX: ffff9141d3a72800 RCX: 0000000000000000 [56252.106844] RDX: 00003329176c6b98 RSI: ffffffe36db3fdc7 RDI: 0000000000000000 [56252.116733] RBP: 0000000000000002 R08: 0000000000000002 R09: 000000000000004e [56252.126652] R10: ffff9149afdb30c4 R11: 071c71c71c71c71c R12: ffffffff985ff860 [56252.136637] R13: 00003329176c6b98 R14: 0000000000000002 R15: 0000000000000000 [56252.146667] ? cpuidle_enter_state+0xab/0x420 [56252.153909] cpuidle_enter+0x2d/0x40 [56252.160360] do_idle+0x176/0x1c0 [56252.166456 ---truncated---
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linuxNo solution exists | Jul 10, 2025 | Jul 10, 2025 |
| Oracle_linux | — | Upgrade kernel-uek | May 13, 2026 | Jul 9, 2025 |
| Redhat_linux | — | No solution exists | Jul 10, 2025 | Jul 9, 2025 |
| Suse | — | Upgrade dtb-lgUpgrade reiserfs-kmp-64kbUpgrade dtb-allwinnerUpgrade kernel-default-vdsoUpgrade cluster-md-kmp-azureUpgrade cluster-md-kmp-rtUpgrade kernel-azure-extraUpgrade kernel-debug-develUpgrade gfs2-kmp-64kbUpgrade kernel-debug-vdsoUpgrade ocfs2-kmp-defaultUpgrade ocfs2-kmp-rtUpgrade dtb-broadcomUpgrade kernel-source-azureUpgrade gfs2-kmp-azureUpgrade kernel-64kbUpgrade kselftests-kmp-azureUpgrade kernel-default-develUpgrade kernel-rt_debug-develUpgrade kselftests-kmp-64kbUpgrade ocfs2-kmp-azureUpgrade kernel-zfcpdumpUpgrade kernel-source-rtUpgrade kernel-rt-optionalUpgrade kernel-rt-vdsoUpgrade kernel-sourceUpgrade kernel-devel-azureUpgrade dtb-alteraUpgrade kernel-azure-optionalUpgrade gfs2-kmp-defaultUpgrade kernel-64kb-optionalUpgrade dtb-marvellUpgrade kernel-debugUpgrade dlm-kmp-64kbUpgrade dtb-amazonUpgrade dtb-amdUpgrade kernel-kvmsmall-develUpgrade kernel-kvmsmall-vdsoUpgrade gfs2-kmp-rtUpgrade kernel-kvmsmallUpgrade kernel-default-livepatchUpgrade reiserfs-kmp-defaultUpgrade dtb-freescaleUpgrade dtb-exynosUpgrade kernel-rt_debugUpgrade dtb-caviumUpgrade dtb-appleUpgrade kernel-azureUpgrade kernel-docs-htmlUpgrade dtb-hisiliconUpgrade kernel-source-vanillaUpgrade ocfs2-kmp-64kbUpgrade kernel-syms-azureUpgrade kernel-rt-extraUpgrade kernel-obs-buildUpgrade dtb-apmUpgrade kernel-64kb-extraUpgrade kernel-symsUpgrade dtb-renesasUpgrade kselftests-kmp-rtUpgrade kernel-docsUpgrade kernel-azure-vdsoUpgrade kernel-azure-develUpgrade kernel-default-baseUpgrade cluster-md-kmp-64kbUpgrade kernel-obs-qaUpgrade kselftests-kmp-defaultUpgrade kernel-devel-rtUpgrade kernel-64kb-develUpgrade cluster-md-kmp-defaultUpgrade reiserfs-kmp-azureUpgrade kernel-rt-livepatch-develUpgrade kernel-macrosUpgrade dlm-kmp-azureUpgrade kernel-default-extraUpgrade kernel-defaultUpgrade dlm-kmp-rtUpgrade kernel-develUpgrade kernel-default-livepatch-develUpgrade kernel-default-optionalUpgrade dtb-rockchipUpgrade dtb-qcomUpgrade kernel-rt-develUpgrade kernel-rt-livepatchUpgrade kernel-rt_debug-vdsoUpgrade dtb-nvidiaUpgrade dtb-sprdUpgrade dtb-socionextUpgrade dtb-armUpgrade reiserfs-kmp-rtUpgrade kernel-rtUpgrade kernel-default-base-rebuildUpgrade dtb-xilinxUpgrade dtb-amlogicUpgrade dlm-kmp-defaultUpgrade dtb-mediatekUpgrade kernel-syms-rt | Dec 5, 2025 | Aug 18, 2025 |
| Ubuntu | — | Upgrade linux-image-generic-64k-6.8Upgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-azure-fipsUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-oem-22.04bUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-fipsUpgrade linux-image-6.14.0-1018-gcpUpgrade linux-image-xilinxUpgrade linux-image-virtualUpgrade linux-image-6.8.0-1046-azureUpgrade linux-image-azure-nvidiaUpgrade linux-image-ibmUpgrade linux-image-ibm-classicUpgrade linux-image-gcpUpgrade linux-image-6.8.0-1051-azureUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-oem-22.04Upgrade linux-image-raspi-realtimeUpgrade linux-image-oem-22.04aUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-oem-6.14Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-oracleUpgrade linux-image-6.8.0-100-fipsUpgrade linux-image-azure-6.14Upgrade linux-image-azure-fips-6.8Upgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-fips-6.8Upgrade linux-image-6.14.0-1015-aws-64kUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-generic-6.8Upgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-nvidiaUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-realtime-hwe-22.04Upgrade linux-image-azure-lts-24.04Upgrade linux-image-genericUpgrade linux-image-ibm-6.8Upgrade linux-image-lowlatencyUpgrade linux-image-6.14.0-1015-oracle-64kUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-oracle-64k-6.8Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-gcp-fips-6.8Upgrade linux-image-aws-64k-6.8Upgrade linux-image-gkeop-6.8Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-oracle-64k-6.14Upgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-generic-lpaeUpgrade linux-image-azure-nvidia-6.14Upgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-lowlatency-64kUpgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-6.8.0-100-genericUpgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-gkeopUpgrade linux-image-6.14.0-1014-realtimeUpgrade linux-image-oem-24.04bUpgrade linux-image-oracle-6.14Upgrade linux-image-generic-64kUpgrade linux-image-realtime-6.8.1Upgrade linux-image-6.14.0-1007-azure-nvidiaUpgrade linux-image-oem-24.04Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-nvidia-6.8Upgrade linux-image-generic-6.14Upgrade linux-image-aws-lts-24.04Upgrade linux-image-azureUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-gkeUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-aws-fipsUpgrade linux-image-gke-6.8Upgrade linux-image-raspi-6.8Upgrade linux-image-aws-64kUpgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-6.14.0-1016-raspiUpgrade linux-image-virtual-6.8Upgrade linux-image-kvmUpgrade linux-image-gcp-fipsUpgrade linux-image-gcp-64kUpgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-aws-6.14Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-raspi-6.14Upgrade linux-image-gcp-6.14Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-generic-64k-6.14Upgrade linux-image-realtimeUpgrade linux-image-xilinx-6.8Upgrade linux-image-6.14.0-1018-gcp-64kUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-virtual-6.14Upgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-gcp-6.8Upgrade linux-image-awsUpgrade linux-image-oem-24.04aUpgrade linux-image-realtime-6.14Upgrade linux-image-oem-22.04cUpgrade linux-image-lowlatency-6.8Upgrade linux-image-raspiUpgrade linux-image-oracle-64kUpgrade linux-image-intel-iotgUpgrade linux-image-gke-64k-6.8Upgrade linux-image-gcp-64k-6.14Upgrade linux-image-azure-6.8Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-gke-64kUpgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-6.14.0-34-generic-64kUpgrade linux-image-6.14.0-1015-oracleUpgrade linux-image-6.14.0-1015-awsUpgrade linux-image-oem-22.04dUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-aws-64k-6.14Upgrade linux-image-6.14.0-1014-azureUpgrade linux-image-nvidia-64kUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-aws-6.8Upgrade linux-image-oem-24.04cUpgrade linux-image-6.8.0-1046-awsUpgrade linux-image-aws-fips-6.8Upgrade linux-image-6.14.0-1014-oemUpgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-6.14.0-34-genericUpgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-oracle-6.8 | Jul 14, 2025 | Jul 9, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 14, 2025 | Jul 9, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub