In the Linux kernel, the following vulnerability has been resolved:
idpf: fix aux device unplugging when rdma is not supported by vport
If vport flags do not contain VIRTCHNL2_VPORT_ENABLE_RDMA, driver does not allocate vdev_info for this vport. This leads to kernel NULL pointer dereference in idpf_idc_vport_dev_down(), which references vdev_info for every vport regardless.
Check, if vdev_info was ever allocated before unplugging aux device.
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Ubuntu | — | Upgrade linux-image-gcpUpgrade linux-image-oem-24.04aUpgrade linux-image-oracle-64kUpgrade linux-image-oem-6.17Upgrade linux-image-6.17.0-1031-nvidia-64kUpgrade linux-image-realtime-6.17Upgrade linux-image-nvidia-6.17Upgrade linux-image-gcp-64kUpgrade linux-image-oem-24.04dUpgrade linux-image-oracle-6.17Upgrade linux-image-realtime-hwe-24.04Upgrade linux-image-azure-fde-6.17Upgrade linux-image-6.17.0-1021-gcpUpgrade linux-image-azureUpgrade linux-image-6.17.0-1019-oracleUpgrade linux-image-azure-fdeUpgrade linux-image-nvidia-64k-6.17Upgrade linux-image-oem-24.04cUpgrade linux-image-6.17.0-1021-gcp-64kUpgrade linux-image-gcp-6.17Upgrade linux-image-6.17.0-1021-azureUpgrade linux-image-6.17.0-1018-realtimeUpgrade linux-image-oracle-64k-6.17Upgrade linux-image-nvidia-hwe-24.04Upgrade linux-image-oem-24.04bUpgrade linux-image-gcp-64k-6.17Upgrade linux-image-6.17.0-1031-nvidiaUpgrade linux-image-6.17.0-1030-oemUpgrade linux-image-oracleUpgrade linux-image-oem-24.04Upgrade linux-image-azure-6.17Upgrade linux-image-6.17.0-1019-oracle-64kUpgrade linux-image-6.17.0-1018-azure-fdeUpgrade linux-image-nvidia-64k-hwe-24.04 | Jul 21, 2026 | Jul 20, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub