Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
6.8

Linux kernel RDMA counters can cause crash

CVE-2025-22089 · published 1 year ago
Summary

The Linux kernel’s RDMA component could let certain performance counters be accessed from the wrong network context, leading to a system crash. This affects standard Linux kernel builds and several Ubuntu cloud kernels. Updating to the latest kernel version resolves the issue.

What to do
  • Update canonical linux-aws-5.15 to version 5.15.0-1086.93~20.04.1.
  • Update canonical linux-azure-5.15 to version 5.15.0-1091.100~20.04.1.
  • Update canonical linux-gcp-5.15 to version 5.15.0-1085.94~20.04.1.
  • Update canonical linux-hwe-5.15 to version 5.15.0-142.152~20.04.1.
  • Update canonical linux-ibm-5.15 to version 5.15.0-1078.81~20.04.1.
  • Update canonical linux-intel-iotg-5.15 to version 5.15.0-1083.89~20.04.1.
  • Update canonical linux-lowlatency-hwe-5.15 to version 5.15.0-142.152~20.04.1.
  • Update canonical linux-nvidia-tegra-5.15 to version 5.15.0-1039.39~20.04.1.
  • Update canonical linux-oracle-5.15 to version 5.15.0-1083.89~20.04.1.
  • Update canonical linux-riscv-5.15 to version 5.15.0-1081.85~20.04.1.
  • Update canonical linux to version 5.15.0-142.152.
  • Update canonical linux-aws to version 5.15.0-1086.93.
  • Update canonical linux-aws-6.8 to version 6.8.0-1041.43~22.04.1.
  • Update canonical linux-azure to version 5.15.0-1091.100.
  • Update canonical linux-azure-6.8 to version 6.8.0-1041.47~22.04.1.
  • Update canonical linux-gcp to version 5.15.0-1085.94.
  • Update canonical linux-gcp-6.8 to version 6.8.0-1042.45~22.04.1.
  • Update canonical linux-gke to version 5.15.0-1083.89.
  • Update canonical linux-gkeop to version 5.15.0-1068.76.
  • Update canonical linux-hwe-6.8 to version 6.8.0-86.87~22.04.1.
  • Update canonical linux-ibm to version 5.15.0-1078.81.
  • Update canonical linux-ibm-6.8 to version 6.8.0-1039.39~22.04.1.
  • Update canonical linux-intel-iotg to version 5.15.0-1081.87.
  • Update canonical linux-kvm to version 5.15.0-1082.87.
  • Update canonical linux-lowlatency to version 5.15.0-142.152.
  • Update canonical linux-lowlatency-hwe-6.8 to version 6.8.0-86.87.1~22.04.1.
  • Update canonical linux-nvidia to version 5.15.0-1080.81.
  • Update canonical linux-nvidia-6.8 to version 6.8.0-1041.44~22.04.2.
  • Update canonical linux-nvidia-tegra to version 5.15.0-1039.39.
  • Update canonical linux-nvidia-tegra-igx to version 5.15.0-1028.28.
  • Update canonical linux-oracle to version 5.15.0-1083.89.
  • Update canonical linux-oracle-6.8 to version 6.8.0-1038.39~22.04.1.
  • Update canonical linux-raspi to version 5.15.0-1080.83.
  • Update canonical linux-riscv-6.8 to version 6.8.0-86.87~22.04.1.
  • Update canonical linux-xilinx-zynqmp to version 5.15.0-1050.54.
  • Update canonical linux-bluefield to version 5.15.0-1069.71.
  • Update canonical linux-aws-fips to version 5.15.0-1086.93+fips1.
  • Update canonical linux-azure-fips to version 5.15.0-1091.100+fips1.
  • Update canonical linux-fips to version 5.15.0-142.152+fips1.
  • Update canonical linux-gcp-fips to version 5.15.0-1085.94+fips1.
  • Update canonical linux-intel-iot-realtime to version 5.15.0-1079.81.
  • Update canonical linux-realtime to version 5.15.0-1086.95.
  • Update canonical linux-realtime-6.8 to version 6.8.1-1036.37~22.04.1.
  • Update canonical linux to version 6.8.0-86.87.
  • Update canonical linux-aws to version 6.8.0-1041.43.
  • Update canonical linux-azure to version 6.8.0-1041.47.
  • Update canonical linux-azure-6.11 to version 6.11.0-1018.18~24.04.1.
  • Update canonical linux-azure-nvidia to version 6.8.0-1029.32.
  • Update canonical linux-gcp to version 6.8.0-1042.45.
  • Update canonical linux-gcp-6.11 to version 6.11.0-1016.16~24.04.1.
  • Update canonical linux-gke to version 6.8.0-1038.43.
  • Update canonical linux-gkeop to version 6.8.0-1025.28.
  • Update canonical linux-hwe-6.11 to version 6.11.0-28.28~24.04.1.
  • Update canonical linux-ibm to version 6.8.0-1039.39.
  • Update canonical linux-lowlatency to version 6.8.0-86.87.1.
  • Update canonical linux-lowlatency-hwe-6.11 to version 6.11.0-1015.16~24.04.2.
  • Update canonical linux-nvidia to version 6.8.0-1041.44.
  • Update canonical linux-nvidia-6.11 to version 6.11.0-1012.12.
  • Update canonical linux-nvidia-lowlatency to version 6.8.0-1041.44.1.
  • Update canonical linux-nvidia-tegra to version 6.8.0-1012.12.
  • Update canonical linux-oem-6.11 to version 6.11.0-1024.24.
  • Update canonical linux-oracle to version 6.8.0-1038.39.
  • Update canonical linux-raspi to version 6.8.0-1041.45.
  • Update canonical linux-xilinx to version 6.8.0-1018.19.
  • Update canonical linux-aws-fips to version 6.8.0-1041.43+fips1.
  • Update canonical linux-azure-fips to version 6.8.0-1044.50+fips1.
  • Update canonical linux-fips to version 6.8.0-86.87+fips1.
  • Update canonical linux-gcp-fips to version 6.8.0-1042.45+fips1.
  • Update canonical linux-raspi-realtime to version 6.8.0-2032.33.
  • Update canonical linux-realtime to version 6.8.1-1036.37.
  • Update linux kernel to version 6.14.2.
  • Update canonical linux to version 6.8.0-138.138.aikido.86.
  • Update canonical rootio-linux to version 6.8.0-138.138.aikido.86.
  • Update canonical linux to version 6.8.0-138.138.aikido.87.
  • Update canonical rootio-linux to version 6.8.0-138.138.aikido.87.
  • Update canonical linux-azure-fde to version 5.15.0-1091.100.1.
  • Update canonical linux-bluefield to version 6.8.0-1012.16.
  • Update linux to version 6.8.0-146.146.aikido.89.
  • Update rootio-linux to version 6.8.0-146.146.aikido.89.
  • Update linux to version 6.8.0-147.147.aikido.90.
  • Update rootio-linux to version 6.8.0-147.147.aikido.90.
  • Update linux linux to version 9a5b7f8842a90a5e6eeff37f9f6d814e61ea3529 or later.
Affected software
Ecosystem VendorProductAffected versions
– linux linux_kernel >= 5.14, < 5.15.180
>= 5.16, < 6.1.134
>= 6.2, < 6.6.87
>= 6.7, < 6.12.23
>= 6.13, < 6.13.11
>= 6.14, < 6.14.2
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Ubuntu:16.04:LTS canonical linux-hwe-edge All versions
Ubuntu:18.04:LTS canonical linux-aws-5.0 All versions
Ubuntu:18.04:LTS canonical linux-aws-5.3 All versions
Ubuntu:18.04:LTS canonical linux-azure All versions
Ubuntu:18.04:LTS canonical linux-azure-5.3 All versions
Ubuntu:18.04:LTS canonical linux-azure-edge All versions
Ubuntu:18.04:LTS canonical linux-gcp All versions
Ubuntu:18.04:LTS canonical linux-gcp-5.3 All versions
Ubuntu:18.04:LTS canonical linux-gke-4.15 All versions
Ubuntu:18.04:LTS canonical linux-gke-5.4 All versions
Ubuntu:18.04:LTS canonical linux-gkeop-5.4 All versions
Ubuntu:18.04:LTS canonical linux-hwe All versions
Ubuntu:18.04:LTS canonical linux-oem All versions
Ubuntu:18.04:LTS canonical linux-oracle-5.0 All versions
Ubuntu:18.04:LTS canonical linux-oracle-5.3 All versions
Ubuntu:20.04:LTS canonical linux-aws-5.11 All versions
Ubuntu:20.04:LTS canonical linux-aws-5.13 All versions
Ubuntu:Pro:20.04:LTS canonical linux-aws-5.15 < 5.15.0-1086.93~20.04.1
Fix: upgrade to 5.15.0-1086.93~20.04.1
Ubuntu:20.04:LTS canonical linux-aws-5.8 All versions
Ubuntu:20.04:LTS canonical linux-azure-5.11 All versions
Ubuntu:20.04:LTS canonical linux-azure-5.13 All versions
Ubuntu:Pro:20.04:LTS canonical linux-azure-5.15 < 5.15.0-1091.100~20.04.1
Fix: upgrade to 5.15.0-1091.100~20.04.1
Ubuntu:20.04:LTS canonical linux-azure-5.8 All versions
Ubuntu:20.04:LTS canonical linux-azure-fde All versions
Ubuntu:20.04:LTS canonical linux-gcp-5.11 All versions
Ubuntu:20.04:LTS canonical linux-gcp-5.13 All versions
Ubuntu:Pro:20.04:LTS canonical linux-gcp-5.15 < 5.15.0-1085.94~20.04.1
Fix: upgrade to 5.15.0-1085.94~20.04.1
Ubuntu:20.04:LTS canonical linux-gcp-5.8 All versions
Ubuntu:20.04:LTS canonical linux-gke All versions
Ubuntu:20.04:LTS canonical linux-gke-5.15 All versions
Ubuntu:20.04:LTS canonical linux-gkeop All versions
Ubuntu:20.04:LTS canonical linux-gkeop-5.15 All versions
Ubuntu:20.04:LTS canonical linux-hwe-5.11 All versions
Ubuntu:20.04:LTS canonical linux-hwe-5.13 All versions
Ubuntu:Pro:20.04:LTS canonical linux-hwe-5.15 < 5.15.0-142.152~20.04.1
Fix: upgrade to 5.15.0-142.152~20.04.1
Ubuntu:20.04:LTS canonical linux-hwe-5.8 All versions
Ubuntu:Pro:20.04:LTS canonical linux-ibm-5.15 < 5.15.0-1078.81~20.04.1
Fix: upgrade to 5.15.0-1078.81~20.04.1
Ubuntu:20.04:LTS canonical linux-intel-5.13 All versions
Ubuntu:Pro:20.04:LTS canonical linux-intel-iotg-5.15 < 5.15.0-1083.89~20.04.1
Fix: upgrade to 5.15.0-1083.89~20.04.1
Ubuntu:Pro:20.04:LTS canonical linux-lowlatency-hwe-5.15 < 5.15.0-142.152~20.04.1
Fix: upgrade to 5.15.0-142.152~20.04.1
Ubuntu:Pro:20.04:LTS canonical linux-nvidia-tegra-5.15 < 5.15.0-1039.39~20.04.1
Fix: upgrade to 5.15.0-1039.39~20.04.1
Ubuntu:20.04:LTS canonical linux-oem-5.10 All versions
Ubuntu:20.04:LTS canonical linux-oem-5.13 All versions
Ubuntu:20.04:LTS canonical linux-oem-5.14 All versions
Ubuntu:20.04:LTS canonical linux-oem-5.6 All versions
Ubuntu:20.04:LTS canonical linux-oracle-5.11 All versions
Ubuntu:20.04:LTS canonical linux-oracle-5.13 All versions
Ubuntu:Pro:20.04:LTS canonical linux-oracle-5.15 < 5.15.0-1083.89~20.04.1
Fix: upgrade to 5.15.0-1083.89~20.04.1
Ubuntu:20.04:LTS canonical linux-oracle-5.8 All versions
Showing 50 of 162. Show the rest
Ecosystem VendorProductAffected versions
Ubuntu:20.04:LTS canonical linux-raspi2 All versions
Ubuntu:20.04:LTS canonical linux-riscv All versions
Ubuntu:20.04:LTS canonical linux-riscv-5.11 All versions
Ubuntu:Pro:20.04:LTS canonical linux-riscv-5.15 < 5.15.0-1081.85~20.04.1
Fix: upgrade to 5.15.0-1081.85~20.04.1
Ubuntu:20.04:LTS canonical linux-riscv-5.8 All versions
Ubuntu:22.04:LTS canonical linux < 5.15.0-142.152
Fix: upgrade to 5.15.0-142.152
Ubuntu:22.04:LTS canonical linux-allwinner-5.19 All versions
Ubuntu:22.04:LTS canonical linux-aws < 5.15.0-1086.93
Fix: upgrade to 5.15.0-1086.93
Ubuntu:22.04:LTS canonical linux-aws-5.19 All versions
Ubuntu:22.04:LTS canonical linux-aws-6.2 All versions
Ubuntu:22.04:LTS canonical linux-aws-6.5 All versions
Ubuntu:22.04:LTS canonical linux-aws-6.8 < 6.8.0-1041.43~22.04.1
Fix: upgrade to 6.8.0-1041.43~22.04.1
Ubuntu:22.04:LTS canonical linux-azure < 5.15.0-1091.100
Fix: upgrade to 5.15.0-1091.100
Ubuntu:22.04:LTS canonical linux-azure-5.19 All versions
Ubuntu:22.04:LTS canonical linux-azure-6.2 All versions
Ubuntu:22.04:LTS canonical linux-azure-6.5 All versions
Ubuntu:22.04:LTS canonical linux-azure-6.8 < 6.8.0-1041.47~22.04.1
Fix: upgrade to 6.8.0-1041.47~22.04.1
Ubuntu:22.04:LTS canonical linux-azure-fde-5.19 All versions
Ubuntu:22.04:LTS canonical linux-azure-fde-6.2 All versions
Ubuntu:22.04:LTS canonical linux-gcp < 5.15.0-1085.94
Fix: upgrade to 5.15.0-1085.94
Ubuntu:22.04:LTS canonical linux-gcp-5.19 All versions
Ubuntu:22.04:LTS canonical linux-gcp-6.2 All versions
Ubuntu:22.04:LTS canonical linux-gcp-6.5 All versions
Ubuntu:22.04:LTS canonical linux-gcp-6.8 < 6.8.0-1042.45~22.04.1
Fix: upgrade to 6.8.0-1042.45~22.04.1
Ubuntu:22.04:LTS canonical linux-gke < 5.15.0-1083.89
Fix: upgrade to 5.15.0-1083.89
Ubuntu:22.04:LTS canonical linux-gkeop < 5.15.0-1068.76
Fix: upgrade to 5.15.0-1068.76
Ubuntu:22.04:LTS canonical linux-hwe-5.19 All versions
Ubuntu:22.04:LTS canonical linux-hwe-6.2 All versions
Ubuntu:22.04:LTS canonical linux-hwe-6.5 All versions
Ubuntu:22.04:LTS canonical linux-hwe-6.8 < 6.8.0-86.87~22.04.1
Fix: upgrade to 6.8.0-86.87~22.04.1
Ubuntu:22.04:LTS canonical linux-ibm < 5.15.0-1078.81
Fix: upgrade to 5.15.0-1078.81
Ubuntu:22.04:LTS canonical linux-ibm-6.8 < 6.8.0-1039.39~22.04.1
Fix: upgrade to 6.8.0-1039.39~22.04.1
Ubuntu:22.04:LTS canonical linux-intel-iot-realtime All versions
Ubuntu:22.04:LTS canonical linux-intel-iotg < 5.15.0-1081.87
Fix: upgrade to 5.15.0-1081.87
Ubuntu:22.04:LTS canonical linux-kvm < 5.15.0-1082.87
Fix: upgrade to 5.15.0-1082.87
Ubuntu:22.04:LTS canonical linux-lowlatency < 5.15.0-142.152
Fix: upgrade to 5.15.0-142.152
Ubuntu:22.04:LTS canonical linux-lowlatency-hwe-5.19 All versions
Ubuntu:22.04:LTS canonical linux-lowlatency-hwe-6.2 All versions
Ubuntu:22.04:LTS canonical linux-lowlatency-hwe-6.5 All versions
Ubuntu:22.04:LTS canonical linux-lowlatency-hwe-6.8 < 6.8.0-86.87.1~22.04.1
Fix: upgrade to 6.8.0-86.87.1~22.04.1
Ubuntu:22.04:LTS canonical linux-nvidia < 5.15.0-1080.81
Fix: upgrade to 5.15.0-1080.81
Ubuntu:22.04:LTS canonical linux-nvidia-6.2 All versions
Ubuntu:22.04:LTS canonical linux-nvidia-6.5 All versions
Ubuntu:22.04:LTS canonical linux-nvidia-6.8 < 6.8.0-1041.44~22.04.2
Fix: upgrade to 6.8.0-1041.44~22.04.2
Ubuntu:22.04:LTS canonical linux-nvidia-tegra < 5.15.0-1039.39
Fix: upgrade to 5.15.0-1039.39
Ubuntu:22.04:LTS canonical linux-nvidia-tegra-igx < 5.15.0-1028.28
Fix: upgrade to 5.15.0-1028.28
Ubuntu:22.04:LTS canonical linux-oem-5.17 All versions
Ubuntu:22.04:LTS canonical linux-oem-6.0 All versions
Ubuntu:22.04:LTS canonical linux-oem-6.1 All versions
Ubuntu:22.04:LTS canonical linux-oem-6.5 All versions
Ubuntu:22.04:LTS canonical linux-oracle < 5.15.0-1083.89
Fix: upgrade to 5.15.0-1083.89
Ubuntu:22.04:LTS canonical linux-oracle-6.5 All versions
Ubuntu:22.04:LTS canonical linux-oracle-6.8 < 6.8.0-1038.39~22.04.1
Fix: upgrade to 6.8.0-1038.39~22.04.1
Ubuntu:22.04:LTS canonical linux-raspi < 5.15.0-1080.83
Fix: upgrade to 5.15.0-1080.83
Ubuntu:22.04:LTS canonical linux-realtime All versions
Ubuntu:22.04:LTS canonical linux-riscv-5.19 All versions
Ubuntu:22.04:LTS canonical linux-riscv-6.5 All versions
Ubuntu:22.04:LTS canonical linux-riscv-6.8 < 6.8.0-86.87~22.04.1
Fix: upgrade to 6.8.0-86.87~22.04.1
Ubuntu:22.04:LTS canonical linux-starfive-5.19 All versions
Ubuntu:22.04:LTS canonical linux-starfive-6.2 All versions
Ubuntu:22.04:LTS canonical linux-starfive-6.5 All versions
Ubuntu:22.04:LTS canonical linux-xilinx-zynqmp < 5.15.0-1050.54
Fix: upgrade to 5.15.0-1050.54
Ubuntu:Nvidia-BlueField:22.04:LTS canonical linux-bluefield < 5.15.0-1069.71
Fix: upgrade to 5.15.0-1069.71
Ubuntu:Pro:FIPS-preview:22.04:LTS canonical linux-aws-fips All versions
Ubuntu:Pro:FIPS-preview:22.04:LTS canonical linux-azure-fips All versions
Ubuntu:Pro:FIPS-preview:22.04:LTS canonical linux-fips All versions
Ubuntu:Pro:FIPS-preview:22.04:LTS canonical linux-gcp-fips All versions
Ubuntu:Pro:FIPS-updates:22.04:LTS canonical linux-aws-fips < 5.15.0-1086.93+fips1
Fix: upgrade to 5.15.0-1086.93+fips1
Ubuntu:Pro:FIPS-updates:22.04:LTS canonical linux-azure-fips < 5.15.0-1091.100+fips1
Fix: upgrade to 5.15.0-1091.100+fips1
Ubuntu:Pro:FIPS-updates:22.04:LTS canonical linux-fips < 5.15.0-142.152+fips1
Fix: upgrade to 5.15.0-142.152+fips1
Ubuntu:Pro:FIPS-updates:22.04:LTS canonical linux-gcp-fips < 5.15.0-1085.94+fips1
Fix: upgrade to 5.15.0-1085.94+fips1
Ubuntu:Pro:Realtime:22.04:LTS canonical linux-intel-iot-realtime < 5.15.0-1079.81
Fix: upgrade to 5.15.0-1079.81
Ubuntu:Pro:Realtime:22.04:LTS canonical linux-realtime < 5.15.0-1086.95
Fix: upgrade to 5.15.0-1086.95
Ubuntu:Pro:Realtime:22.04:LTS canonical linux-realtime-6.8 < 6.8.1-1036.37~22.04.1
Fix: upgrade to 6.8.1-1036.37~22.04.1
Ubuntu:24.04:LTS canonical linux < 6.8.0-86.87
Fix: upgrade to 6.8.0-86.87
Ubuntu:24.04:LTS canonical linux-aws < 6.8.0-1041.43
Fix: upgrade to 6.8.0-1041.43
Ubuntu:24.04:LTS canonical linux-azure < 6.8.0-1041.47
Fix: upgrade to 6.8.0-1041.47
Ubuntu:24.04:LTS canonical linux-azure-6.11 < 6.11.0-1018.18~24.04.1
Fix: upgrade to 6.11.0-1018.18~24.04.1
Ubuntu:24.04:LTS canonical linux-azure-nvidia < 6.8.0-1029.32
Fix: upgrade to 6.8.0-1029.32
Ubuntu:24.04:LTS canonical linux-gcp < 6.8.0-1042.45
Fix: upgrade to 6.8.0-1042.45
Ubuntu:24.04:LTS canonical linux-gcp-6.11 < 6.11.0-1016.16~24.04.1
Fix: upgrade to 6.11.0-1016.16~24.04.1
Ubuntu:24.04:LTS canonical linux-gke < 6.8.0-1038.43
Fix: upgrade to 6.8.0-1038.43
Ubuntu:24.04:LTS canonical linux-gkeop < 6.8.0-1025.28
Fix: upgrade to 6.8.0-1025.28
Ubuntu:24.04:LTS canonical linux-hwe-6.11 < 6.11.0-28.28~24.04.1
Fix: upgrade to 6.11.0-28.28~24.04.1
Ubuntu:24.04:LTS canonical linux-ibm < 6.8.0-1039.39
Fix: upgrade to 6.8.0-1039.39
Ubuntu:24.04:LTS canonical linux-intel All versions
Ubuntu:24.04:LTS canonical linux-lowlatency < 6.8.0-86.87.1
Fix: upgrade to 6.8.0-86.87.1
Ubuntu:24.04:LTS canonical linux-lowlatency-hwe-6.11 < 6.11.0-1015.16~24.04.2
Fix: upgrade to 6.11.0-1015.16~24.04.2
Ubuntu:24.04:LTS canonical linux-nvidia < 6.8.0-1041.44
Fix: upgrade to 6.8.0-1041.44
Ubuntu:24.04:LTS canonical linux-nvidia-6.11 < 6.11.0-1012.12
Fix: upgrade to 6.11.0-1012.12
Ubuntu:24.04:LTS canonical linux-nvidia-lowlatency < 6.8.0-1041.44.1
Fix: upgrade to 6.8.0-1041.44.1
Ubuntu:24.04:LTS canonical linux-nvidia-tegra < 6.8.0-1012.12
Fix: upgrade to 6.8.0-1012.12
Ubuntu:24.04:LTS canonical linux-oem-6.11 < 6.11.0-1024.24
Fix: upgrade to 6.11.0-1024.24
Ubuntu:24.04:LTS canonical linux-oem-6.8 All versions
Ubuntu:24.04:LTS canonical linux-oracle < 6.8.0-1038.39
Fix: upgrade to 6.8.0-1038.39
Ubuntu:24.04:LTS canonical linux-raspi < 6.8.0-1041.45
Fix: upgrade to 6.8.0-1041.45
Ubuntu:24.04:LTS canonical linux-raspi-realtime All versions
Ubuntu:24.04:LTS canonical linux-xilinx < 6.8.0-1018.19
Fix: upgrade to 6.8.0-1018.19
Ubuntu:Nvidia-BlueField:24.04:LTS canonical linux-bluefield < 6.8.0-1012.16
Fix: upgrade to 6.8.0-1012.16
Ubuntu:Pro:FIPS-updates:24.04:LTS canonical linux-aws-fips < 6.8.0-1041.43+fips1
Fix: upgrade to 6.8.0-1041.43+fips1
Ubuntu:Pro:FIPS-updates:24.04:LTS canonical linux-azure-fips < 6.8.0-1044.50+fips1
Fix: upgrade to 6.8.0-1044.50+fips1
Ubuntu:Pro:FIPS-updates:24.04:LTS canonical linux-fips < 6.8.0-86.87+fips1
Fix: upgrade to 6.8.0-86.87+fips1
Ubuntu:Pro:FIPS-updates:24.04:LTS canonical linux-gcp-fips < 6.8.0-1042.45+fips1
Fix: upgrade to 6.8.0-1042.45+fips1
Ubuntu:Pro:Realtime:24.04:LTS canonical linux-raspi-realtime < 6.8.0-2032.33
Fix: upgrade to 6.8.0-2032.33
Ubuntu:Pro:Realtime:24.04:LTS canonical linux-realtime < 6.8.1-1036.37
Fix: upgrade to 6.8.1-1036.37
Linux linux kernel >= 6.14.0, < 6.14.2
Fix: upgrade to 6.14.2
– linux linux < 9a5b7f8842a90a5e6eeff37f9f6d814e61ea3529
5.14
Root:Ubuntu:24.04 canonical linux < 6.8.0-138.138.aikido.86
< 6.8.0-138.138.aikido.87
Fix: upgrade to 6.8.0-138.138.aikido.86
Root:Ubuntu:24.04 canonical rootio-linux < 6.8.0-138.138.aikido.86
< 6.8.0-138.138.aikido.87
Fix: upgrade to 6.8.0-138.138.aikido.86
Ubuntu:22.04:LTS canonical linux-azure-fde < 5.15.0-1091.100.1
Fix: upgrade to 5.15.0-1091.100.1
Root:Ubuntu:24.04 – linux < 6.8.0-146.146.aikido.89
< 6.8.0-147.147.aikido.90
Fix: upgrade to 6.8.0-146.146.aikido.89
Root:Ubuntu:24.04 – rootio-linux < 6.8.0-146.146.aikido.89
< 6.8.0-147.147.aikido.90
Fix: upgrade to 6.8.0-146.146.aikido.89
Original advisory text
RDMA/core: Don't expose hw_counters outside of init net namespace
In the Linux kernel, the following vulnerability has been resolved:

RDMA/core: Don't expose hw_counters outside of init net namespace

Commit 467f432a521a ("RDMA/core: Split port and device counter sysfs
attributes") accidentally almost exposed hw counters to non-init net
namespaces. It didn't expose them fully, as an attempt to read any of
those counters leads to a crash like this one:

[42021.807566] BUG: kernel NULL pointer dereference, address: 0000000000000028
[42021.814463] #PF: supervisor read access in kernel mode
[42021.819549] #PF: error_code(0x0000) - not-present page
[42021.824636] PGD 0 P4D 0
[42021.827145] Oops: 0000 [#1] SMP PTI
[42021.830598] CPU: 82 PID: 2843922 Comm: switchto-defaul Kdump: loaded Tainted: G S W I XXX
[42021.841697] Hardware name: XXX
[42021.849619] RIP: 0010:hw_stat_device_show+0x1e/0x40 [ib_core]
[42021.855362] Code: 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 0f 1f 44 00 00 49 89 d0 4c 8b 5e 20 48 8b 8f b8 04 00 00 48 81 c7 f0 fa ff ff <48> 8b 41 28 48 29 ce 48 83 c6 d0 48 c1 ee 04 69 d6 ab aa aa aa 48
[42021.873931] RSP: 0018:ffff97fe90f03da0 EFLAGS: 00010287
[42021.879108] RAX: ffff9406988a8c60 RBX: ffff940e1072d438 RCX: 0000000000000000
[42021.886169] RDX: ffff94085f1aa000 RSI: ffff93c6cbbdbcb0 RDI: ffff940c7517aef0
[42021.893230] RBP: ffff97fe90f03e70 R08: ffff94085f1aa000 R09: 0000000000000000
[42021.900294] R10: ffff94085f1aa000 R11: ffffffffc0775680 R12: ffffffff87ca2530
[42021.907355] R13: ffff940651602840 R14: ffff93c6cbbdbcb0 R15: ffff94085f1aa000
[42021.914418] FS: 00007fda1a3b9700(0000) GS:ffff94453fb80000(0000) knlGS:0000000000000000
[42021.922423] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[42021.928130] CR2: 0000000000000028 CR3: 00000042dcfb8003 CR4: 00000000003726f0
[42021.935194] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[42021.942257] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[42021.949324] Call Trace:
[42021.951756] <TASK>
[42021.953842] [<ffffffff86c58674>] ? show_regs+0x64/0x70
[42021.959030] [<ffffffff86c58468>] ? __die+0x78/0xc0
[42021.963874] [<ffffffff86c9ef75>] ? page_fault_oops+0x2b5/0x3b0
[42021.969749] [<ffffffff87674b92>] ? exc_page_fault+0x1a2/0x3c0
[42021.975549] [<ffffffff87801326>] ? asm_exc_page_fault+0x26/0x30
[42021.981517] [<ffffffffc0775680>] ? __pfx_show_hw_stats+0x10/0x10 [ib_core]
[42021.988482] [<ffffffffc077564e>] ? hw_stat_device_show+0x1e/0x40 [ib_core]
[42021.995438] [<ffffffff86ac7f8e>] dev_attr_show+0x1e/0x50
[42022.000803] [<ffffffff86a3eeb1>] sysfs_kf_seq_show+0x81/0xe0
[42022.006508] [<ffffffff86a11134>] seq_read_iter+0xf4/0x410
[42022.011954] [<ffffffff869f4b2e>] vfs_read+0x16e/0x2f0
[42022.017058] [<ffffffff869f50ee>] ksys_read+0x6e/0xe0
[42022.022073] [<ffffffff8766f1ca>] do_syscall_64+0x6a/0xa0
[42022.027441] [<ffffffff8780013b>] entry_SYSCALL_64_after_hwframe+0x78/0xe2

The problem can be reproduced using the following steps:
ip netns add foo
ip netns exec foo bash
cat /sys/class/infiniband/mlx4_0/hw_counters/*

The panic occurs because of casting the device pointer into an
ib_device pointer using container_of() in hw_stat_device_show() is
wrong and leads to a memory corruption.

However the real problem is that hw counters should never been exposed
outside of the non-init net namespace.

Fix this by saving the index of the corresponding attribute group
(it might be 1 or 2 depending on the presence of driver-specific
attributes) and zeroing the pointer to hw_counters group for compat
devices during the initialization.

With this fix applied hw_counters are not available in a non-init
net namespace:
find /sys/class/infiniband/mlx4_0/ -name hw_counters
/sys/class/infiniband/mlx4_0/ports/1/hw_counters
/sys/class/infiniband/mlx4_0/ports/2/hw_counters
/sys/class/infiniband/mlx4_0/hw_counters

ip netns add foo
ip netns exec foo bash
find /sys/class/infiniband/mlx4_0/ -name hw_counters
References
Fix within
Internet-facing 60 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit (estimated)
  • Gives an attacker partial control (estimated)
Severity
6.8 Medium
Exploitation
<1% chance of attack within 30 days
Type
CWE-476NULL Pointer Dereference
Timeline
Published16 Apr 2025
Updated29 Oct 2026
First seen7 Mar 2026
Sources
CVE-2025-22089 · OSV
CVE-2025-22089 · NVD
CVE-2025-22089 · MITRE
ROOT-OS-UBUNTU-2404-CVE-2025-22089 · OSV
UBUNTU-CVE-2025-22089 · OSV
Track software like this
Free during beta