In the Linux kernel, the following vulnerability has been resolved:
bnxt: properly flush XDP redirect lists
We encountered following crash when testing a XDP_REDIRECT feature in production:
[56251.579676] list_add corruption. next->prev should be prev (ffff93120dd40f30), but was ffffb301ef3a6740. (next=ffff93120dd 40f30). [56251.601413] ------------[ cut here ]------------ [56251.611357] kernel BUG at lib/list_debug.c:29! [56251.621082] Oops: invalid opcode: 0000 [#1] PREEMPT SMP NOPTI [56251.632073] CPU: 111 UID: 0 PID: 0 Comm: swapper/111 Kdump: loaded Tainted: P O 6.12.33-cloudflare-2025.6. 3 #1 [56251.653155] Tainted: [P]=PROPRIETARY_MODULE, [O]=OOT_MODULE [56251.663877] Hardware name: MiTAC GC68B-B8032-G11P6-GPU/S8032GM-HE-CFR, BIOS V7.020.B10-sig 01/22/2025 [56251.682626] RIP: 0010:__list_add_valid_or_report+0x4b/0xa0 [56251.693203] Code: 0e 48 c7 c7 68 e7 d9 97 e8 42 16 fe ff 0f 0b 48 8b 52 08 48 39 c2 74 14 48 89 f1 48 c7 c7 90 e7 d9 97 48 89 c6 e8 25 16 fe ff <0f> 0b 4c 8b 02 49 39 f0 74 14 48 89 d1 48 c7 c7 e8 e7 d9 97 4c 89 [56251.725811] RSP: 0018:ffff93120dd40b80 EFLAGS: 00010246 [56251.736094] RAX: 0000000000000075 RBX: ffffb301e6bba9d8 RCX: 0000000000000000 [56251.748260] RDX: 0000000000000000 RSI: ffff9149afda0b80 RDI: ffff9149afda0b80 [56251.760349] RBP: ffff9131e49c8000 R08: 0000000000000000 R09: ffff93120dd40a18 [56251.772382] R10: ffff9159cf2ce1a8 R11: 0000000000000003 R12: ffff911a80850000 [56251.784364] R13: ffff93120fbc7000 R14: 0000000000000010 R15: ffff9139e7510e40 [56251.796278] FS: 0000000000000000(0000) GS:ffff9149afd80000(0000) knlGS:0000000000000000 [56251.809133] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [56251.819561] CR2: 00007f5e85e6f300 CR3: 00000038b85e2006 CR4: 0000000000770ef0 [56251.831365] PKRU: 55555554 [56251.838653] Call Trace: [56251.845560] <IRQ> [56251.851943] cpu_map_enqueue.cold+0x5/0xa [56251.860243] xdp_do_redirect+0x2d9/0x480 [56251.868388] bnxt_rx_xdp+0x1d8/0x4c0 [bnxt_en] [56251.877028] bnxt_rx_pkt+0x5f7/0x19b0 [bnxt_en] [56251.885665] ? cpu_max_write+0x1e/0x100 [56251.893510] ? srso_alias_return_thunk+0x5/0xfbef5 [56251.902276] __bnxt_poll_work+0x190/0x340 [bnxt_en] [56251.911058] bnxt_poll+0xab/0x1b0 [bnxt_en] [56251.919041] ? srso_alias_return_thunk+0x5/0xfbef5 [56251.927568] ? srso_alias_return_thunk+0x5/0xfbef5 [56251.935958] ? srso_alias_return_thunk+0x5/0xfbef5 [56251.944250] __napi_poll+0x2b/0x160 [56251.951155] bpf_trampoline_6442548651+0x79/0x123 [56251.959262] __napi_poll+0x5/0x160 [56251.966037] net_rx_action+0x3d2/0x880 [56251.973133] ? srso_alias_return_thunk+0x5/0xfbef5 [56251.981265] ? srso_alias_return_thunk+0x5/0xfbef5 [56251.989262] ? __hrtimer_run_queues+0x162/0x2a0 [56251.996967] ? srso_alias_return_thunk+0x5/0xfbef5 [56252.004875] ? srso_alias_return_thunk+0x5/0xfbef5 [56252.012673] ? bnxt_msix+0x62/0x70 [bnxt_en] [56252.019903] handle_softirqs+0xcf/0x270 [56252.026650] irq_exit_rcu+0x67/0x90 [56252.032933] common_interrupt+0x85/0xa0 [56252.039498] </IRQ> [56252.044246] <TASK> [56252.048935] asm_common_interrupt+0x26/0x40 [56252.055727] RIP: 0010:cpuidle_enter_state+0xb8/0x420 [56252.063305] Code: dc 01 00 00 e8 f9 79 3b ff e8 64 f7 ff ff 49 89 c5 0f 1f 44 00 00 31 ff e8 a5 32 3a ff 45 84 ff 0f 85 ae 01 00 00 fb 45 85 f6 <0f> 88 88 01 00 00 48 8b 04 24 49 63 ce 4c 89 ea 48 6b f1 68 48 29 [56252.088911] RSP: 0018:ffff93120c97fe98 EFLAGS: 00000202 [56252.096912] RAX: ffff9149afd80000 RBX: ffff9141d3a72800 RCX: 0000000000000000 [56252.106844] RDX: 00003329176c6b98 RSI: ffffffe36db3fdc7 RDI: 0000000000000000 [56252.116733] RBP: 0000000000000002 R08: 0000000000000002 R09: 000000000000004e [56252.126652] R10: ffff9149afdb30c4 R11: 071c71c71c71c71c R12: ffffffff985ff860 [56252.136637] R13: 00003329176c6b98 R14: 0000000000000002 R15: 0000000000000000 [56252.146667] ? cpuidle_enter_state+0xab/0x420 [56252.153909] cpuidle_enter+0x2d/0x40 [56252.160360] do_idle+0x176/0x1c0 [56252.166456 ---truncated---
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 10, 2025 | Jul 10, 2025 |
| Oracle_linux | — | Upgrade kernel-uek | May 13, 2026 | Jul 9, 2025 |
| Redhat_linux | — | No solution exists | Jul 10, 2025 | Jul 9, 2025 |
| Suse | — | Upgrade kernel-devel-azureUpgrade reiserfs-kmp-defaultUpgrade kernel-default-vdsoUpgrade reiserfs-kmp-64kbUpgrade dtb-appleUpgrade cluster-md-kmp-azureUpgrade cluster-md-kmp-rtUpgrade dtb-alteraUpgrade dtb-lgUpgrade kernel-rt-vdsoUpgrade dtb-allwinnerUpgrade kernel-docs-htmlUpgrade kernel-sourceUpgrade dlm-kmp-64kbUpgrade kernel-rt-optionalUpgrade dtb-amdUpgrade dtb-freescaleUpgrade gfs2-kmp-rtUpgrade dtb-amazonUpgrade dtb-marvellUpgrade kernel-kvmsmallUpgrade kernel-default-livepatchUpgrade kernel-azure-extraUpgrade kernel-kvmsmall-vdsoUpgrade dtb-exynosUpgrade kernel-azure-optionalUpgrade kernel-source-vanillaUpgrade kernel-debug-vdsoUpgrade kernel-source-azureUpgrade kernel-debug-develUpgrade ocfs2-kmp-defaultUpgrade kernel-zfcpdumpUpgrade dtb-broadcomUpgrade kernel-source-rtUpgrade ocfs2-kmp-rtUpgrade dtb-caviumUpgrade ocfs2-kmp-azureUpgrade gfs2-kmp-64kbUpgrade kernel-azureUpgrade kernel-rt_debugUpgrade kernel-syms-azureUpgrade kernel-kvmsmall-develUpgrade ocfs2-kmp-64kbUpgrade kernel-debugUpgrade dtb-hisiliconUpgrade kernel-64kb-optionalUpgrade kselftests-kmp-azureUpgrade gfs2-kmp-azureUpgrade kernel-default-develUpgrade kernel-64kbUpgrade kernel-rt_debug-develUpgrade kselftests-kmp-64kbUpgrade gfs2-kmp-defaultUpgrade kernel-default-livepatch-develUpgrade kernel-macrosUpgrade kernel-devel-rtUpgrade kernel-64kb-develUpgrade dlm-kmp-azureUpgrade dtb-nvidiaUpgrade kernel-rt_debug-vdsoUpgrade kernel-rt-livepatchUpgrade dtb-sprdUpgrade kselftests-kmp-rtUpgrade kernel-symsUpgrade kernel-docsUpgrade kernel-azure-vdsoUpgrade kernel-azure-develUpgrade dtb-renesasUpgrade kernel-default-optionalUpgrade kernel-rt-develUpgrade kernel-syms-rtUpgrade dtb-apmUpgrade dlm-kmp-rtUpgrade kernel-develUpgrade kernel-default-extraUpgrade kernel-defaultUpgrade dtb-rockchipUpgrade dtb-qcomUpgrade kernel-default-baseUpgrade cluster-md-kmp-64kbUpgrade kselftests-kmp-defaultUpgrade kernel-obs-qaUpgrade kernel-obs-buildUpgrade kernel-rt-extraUpgrade kernel-64kb-extraUpgrade dtb-amlogicUpgrade dlm-kmp-defaultUpgrade dtb-mediatekUpgrade kernel-rtUpgrade reiserfs-kmp-rtUpgrade kernel-default-base-rebuildUpgrade dtb-xilinxUpgrade dtb-socionextUpgrade dtb-armUpgrade cluster-md-kmp-defaultUpgrade reiserfs-kmp-azureUpgrade kernel-rt-livepatch-devel | Dec 5, 2025 | Aug 18, 2025 |
| Ubuntu | — | Upgrade linux-image-gcp-64k-6.14Upgrade linux-image-realtime-6.14Upgrade linux-image-lowlatency-6.8Upgrade linux-image-realtime-hwe-24.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-raspi-6.8Upgrade linux-image-oem-22.04cUpgrade linux-image-xilinx-6.8Upgrade linux-image-aws-64kUpgrade linux-image-azure-6.8Upgrade linux-image-raspiUpgrade linux-image-oem-24.04cUpgrade linux-image-aws-6.8Upgrade linux-image-generic-6.14Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-gkeUpgrade linux-image-intel-iotgUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-aws-lts-24.04Upgrade linux-image-azureUpgrade linux-image-oracle-64kUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-6.14.0-1007-azure-nvidiaUpgrade linux-image-nvidia-6.8Upgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-realtimeUpgrade linux-image-virtual-6.8Upgrade linux-image-6.14.0-1016-raspiUpgrade linux-image-aws-fips-6.8Upgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-gke-64k-6.8Upgrade linux-image-6.14.0-34-genericUpgrade linux-image-6.8.0-1046-awsUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-oracle-6.8Upgrade linux-image-raspi-6.14Upgrade linux-image-nvidia-64kUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-gcp-64k-6.8Upgrade linux-image-generic-64k-6.14Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-6.14.0-1015-awsUpgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-aws-fipsUpgrade linux-image-6.14.0-1014-azureUpgrade linux-image-6.14.0-1014-oemUpgrade linux-image-gcp-6.14Upgrade linux-image-aws-64k-6.14Upgrade linux-image-oem-24.04aUpgrade linux-image-virtual-6.14Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-awsUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-gke-64kUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-gcp-6.8Upgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-6.14.0-34-generic-64kUpgrade linux-image-oem-22.04dUpgrade linux-image-6.14.0-1015-oracleUpgrade linux-image-realtime-6.8.1Upgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-gke-6.8Upgrade linux-image-aws-6.14Upgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-6.14.0-1018-gcp-64kUpgrade linux-image-gcp-fipsUpgrade linux-image-oem-24.04Upgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-kvmUpgrade linux-image-gcp-64kUpgrade linux-image-oem-22.04aUpgrade linux-image-azure-fipsUpgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-6.8.0-1046-azureUpgrade linux-image-generic-64k-6.8Upgrade linux-image-generic-64kUpgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-6.8.0-1051-azureUpgrade linux-image-ibm-classicUpgrade linux-image-oracle-6.14Upgrade linux-image-nvidiaUpgrade linux-image-azure-nvidia-6.14Upgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-fipsUpgrade linux-image-6.14.0-1015-aws-64kUpgrade linux-image-ibmUpgrade linux-image-azure-nvidiaUpgrade linux-image-azure-6.14Upgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-oem-22.04Upgrade linux-image-azure-fips-6.8Upgrade linux-image-oracleUpgrade linux-image-generic-6.8Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-genericUpgrade linux-image-6.14.0-1014-realtimeUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-gcp-fips-6.8Upgrade linux-image-aws-64k-6.8Upgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-gkeop-6.8Upgrade linux-image-oracle-64k-6.14Upgrade linux-image-xilinxUpgrade linux-image-azure-lts-24.04Upgrade linux-image-generic-lpaeUpgrade linux-image-lowlatencyUpgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-ibm-6.8Upgrade linux-image-gkeopUpgrade linux-image-6.14.0-1015-oracle-64kUpgrade linux-image-realtime-hwe-22.04Upgrade linux-image-raspi-realtime-6.8Upgrade linux-image-oracle-64k-6.8Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-oem-6.14Upgrade linux-image-raspi-realtimeUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-fips-6.8Upgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-6.8.0-100-fipsUpgrade linux-image-6.14.0-1018-gcpUpgrade linux-image-gcpUpgrade linux-image-6.8.0-100-genericUpgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-oem-24.04bUpgrade linux-image-virtualUpgrade linux-image-oem-22.04bUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-lowlatency-64k | Jul 14, 2025 | Jul 9, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 14, 2025 | Jul 9, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub