In the Linux kernel, the following vulnerability has been resolved:
gve: prevent ethtool ops after shutdown
A crash can occur if an ethtool operation is invoked after shutdown() is called.
shutdown() is invoked during system shutdown to stop DMA operations without performing expensive deallocations. It is discouraged to unregister the netdev in this path, so the device may still be visible to userspace and kernel helpers.
In gve, shutdown() tears down most internal data structures. If an ethtool operation is dispatched after shutdown(), it will dereference freed or NULL pointers, leading to a kernel panic. While graceful shutdown normally quiesces userspace before invoking the reboot syscall, forced shutdowns (as observed on GCP VMs) can still trigger this path.
Fix by calling netif_device_detach() in shutdown(). This marks the device as detached so the ethtool ioctl handler will skip dispatching operations to the driver.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Sep 25, 2025 | Sep 25, 2025 |
| Oracle_linux | — | Upgrade kernel-uek | Nov 11, 2025 | Sep 5, 2025 |
| Redhat_linux | — | No solution exists | Jul 17, 2026 | Sep 5, 2025 |
| Suse | — | Upgrade kernel-azureUpgrade dlm-kmp-defaultUpgrade kernel-debug-vdsoUpgrade kernel-defaultUpgrade kernel-default-base-rebuildUpgrade kernel-default-livepatch-develUpgrade kselftests-kmp-azureUpgrade ocfs2-kmp-64kbUpgrade kernel-default-vdsoUpgrade reiserfs-kmp-rtUpgrade kernel-rt-extraUpgrade kernel-rt-vdsoUpgrade kernel-default-livepatchUpgrade kernel-obs-buildUpgrade dtb-caviumUpgrade kernel-source-vanillaUpgrade dtb-broadcomUpgrade dtb-rockchipUpgrade dtb-hisiliconUpgrade dtb-renesasUpgrade kernel-symsUpgrade kernel-default-develUpgrade dtb-appleUpgrade kselftests-kmp-defaultUpgrade gfs2-kmp-rtUpgrade kernel-debug-develUpgrade kernel-rt_debug-vdsoUpgrade dlm-kmp-64kbUpgrade kernel-zfcpdumpUpgrade dtb-amdUpgrade kernel-obs-qaUpgrade kernel-default-optionalUpgrade kernel-64kbUpgrade dtb-freescaleUpgrade dtb-exynosUpgrade cluster-md-kmp-rtUpgrade cluster-md-kmp-azureUpgrade ocfs2-kmp-rtUpgrade kernel-debugUpgrade dtb-mediatekUpgrade dtb-armUpgrade dtb-amazonUpgrade kernel-default-extraUpgrade ocfs2-kmp-azureUpgrade kernel-sourceUpgrade kernel-rt-livepatchUpgrade kernel-devel-azureUpgrade kernel-syms-rtUpgrade kernel-source-azureUpgrade kernel-64kb-optionalUpgrade dtb-xilinxUpgrade dtb-apmUpgrade dlm-kmp-azureUpgrade cluster-md-kmp-defaultUpgrade kernel-syms-azureUpgrade kernel-rt-develUpgrade kernel-kvmsmallUpgrade kernel-develUpgrade kernel-azure-extraUpgrade kernel-64kb-develUpgrade dtb-lgUpgrade dtb-amlogicUpgrade reiserfs-kmp-defaultUpgrade kernel-rt-livepatch-develUpgrade kselftests-kmp-64kbUpgrade kernel-macrosUpgrade kernel-kvmsmall-develUpgrade kernel-docsUpgrade reiserfs-kmp-azureUpgrade kernel-devel-rtUpgrade gfs2-kmp-64kbUpgrade reiserfs-kmp-64kbUpgrade dtb-sprdUpgrade kernel-azure-vdsoUpgrade kernel-rtUpgrade kernel-source-rtUpgrade cluster-md-kmp-64kbUpgrade kernel-kvmsmall-vdsoUpgrade dtb-qcomUpgrade kernel-64kb-extraUpgrade dtb-allwinnerUpgrade kernel-default-manUpgrade dtb-alteraUpgrade gfs2-kmp-azureUpgrade kselftests-kmp-rtUpgrade gfs2-kmp-defaultUpgrade dtb-marvellUpgrade kernel-azure-develUpgrade kernel-default-baseUpgrade kernel-rt-optionalUpgrade dtb-nvidiaUpgrade dtb-socionextUpgrade kernel-rt_debugUpgrade ocfs2-kmp-defaultUpgrade kernel-azure-optionalUpgrade kernel-docs-htmlUpgrade kernel-rt_debug-develUpgrade dlm-kmp-rt | Dec 5, 2025 | Oct 15, 2025 |
| Ubuntu | — | Upgrade linux-image-6.8.0-1046-azureUpgrade linux-image-oem-22.04aUpgrade linux-image-oem-22.04Upgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-lowlatency-6.8Upgrade linux-image-gcp-fipsUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-azure-fipsUpgrade linux-image-aws-fipsUpgrade linux-image-ibmUpgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-virtual-6.8Upgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-lowlatency-64kUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-gkeop-6.8Upgrade linux-image-realtimeUpgrade linux-image-fipsUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-generic-lpaeUpgrade linux-image-oracleUpgrade linux-image-gcp-6.8Upgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-nvidia-6.8Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-awsUpgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-lowlatencyUpgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-generic-64k-6.8Upgrade linux-image-gke-64kUpgrade linux-image-raspi-6.8Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-6.8.0-1046-awsUpgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-xilinx-6.8Upgrade linux-image-oem-22.04cUpgrade linux-image-nvidia-64kUpgrade linux-image-intel-iotgUpgrade linux-image-aws-lts-24.04Upgrade linux-image-intel-iot-realtimeUpgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-generic-6.8Upgrade linux-image-oem-22.04dUpgrade linux-image-ibm-classicUpgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-raspi-realtimeUpgrade linux-image-6.8.0-100-fipsUpgrade linux-image-oem-22.04bUpgrade linux-image-fips-6.8Upgrade linux-image-oracle-64kUpgrade linux-image-genericUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-6.8.0-1051-azureUpgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-6.8.0-100-genericUpgrade linux-image-xilinxUpgrade linux-image-kvmUpgrade linux-image-aws-fips-6.8Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-gcpUpgrade linux-image-gkeUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-aws-64kUpgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-ibm-6.8Upgrade linux-image-raspiUpgrade linux-image-virtualUpgrade linux-image-gke-6.8Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-aws-6.8Upgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-generic-64kUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-azure-lts-24.04Upgrade linux-image-azure-6.8Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-gcp-fips-6.8Upgrade linux-image-aws-64k-6.8Upgrade linux-image-oracle-64k-6.8Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-oracle-6.8Upgrade linux-image-azureUpgrade linux-image-azure-fips-6.8Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-realtime-hwe-22.04Upgrade linux-image-realtime-6.8.1Upgrade linux-image-gkeopUpgrade linux-image-gke-64k-6.8Upgrade linux-image-gcp-64kUpgrade linux-image-nvidia | Feb 12, 2026 | Sep 5, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 7, 2025 | Sep 5, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub