In the Linux kernel, the following vulnerability has been resolved:
nvme-tcp: fix potential memory corruption in nvme_tcp_recv_pdu()
nvme_tcp_recv_pdu() doesn't check the validity of the header length. When header digests are enabled, a target might send a packet with an invalid header length (e.g. 255), causing nvme_tcp_verify_hdgst() to access memory outside the allocated area and cause memory corruptions by overwriting it with the calculated digest.
Fix this by rejecting packets with an unexpected header length.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-debug-modules-coreUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-zfcpdump-modulesUpgrade kernel-zfcpdump-develUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-uki-virtUpgrade kernel-debugUpgrade kernel-rt-modules-coreUpgrade kernel-zfcpdump-coreUpgrade kernel-rt-64k-modules-coreUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-debug-modules-extraUpgrade perfUpgrade kernel-64k-debug-develUpgrade kernel-rt-64k-modules-extraUpgrade kernel-zfcpdumpUpgrade kernel-rt-modulesUpgrade kernel-modules-extraUpgrade kernel-debug-devel-matchedUpgrade kernel-debug-uki-virtUpgrade kernel-64k-debug-modules-coreUpgrade kernel-rtUpgrade kernel-rt-debug-modulesUpgrade kernel-64k-debug-modulesUpgrade kernel-rt-debug-kvmUpgrade kernel-devel-matchedUpgrade kernel-uki-virt-addonsUpgrade rvUpgrade kernel-debug-coreUpgrade kernel-64k-modules-extraUpgrade kernel-rt-debug-modules-extraUpgrade kernel-coreUpgrade kernel-modulesUpgrade kernel-toolsUpgrade kernel-rt-debug-modules-coreUpgrade kernel-rt-debug-develUpgrade libperfUpgrade kernel-64k-debugUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-docUpgrade kernel-64k-debug-modules-extraUpgrade kernel-develUpgrade kernel-modules-coreUpgrade kernel-64k-develUpgrade kernel-rt-64k-debug-modulesUpgrade kernel-debug-develUpgrade kernel-64k-debug-coreUpgrade kernel-rt-64k-modulesUpgrade kernel-64k-devel-matchedUpgrade rtlaUpgrade kernel-abi-stablelistsUpgrade kernel-rt-64k-debug-modules-extraUpgrade kernel-64k-modulesUpgrade kernel-rt-64k-debug-coreUpgrade kernel-64kUpgrade kernel-tools-libs-develUpgrade kernel-rt-64k-debug-develUpgrade kernel-cross-headersUpgrade kernel-debug-modulesUpgrade kernel-rt-64k-coreUpgrade kernel-rt-64k-develUpgrade kernel-rt-modules-extraUpgrade kernel-64k-coreUpgrade kernel-rt-64k-debugUpgrade python3-perfUpgrade kernel-64k-modules-coreUpgrade kernel-headersUpgrade kernel-rt-64k-debug-modules-coreUpgrade kernelUpgrade kernel-rt-develUpgrade kernel-rt-kvmUpgrade kernel-tools-libsUpgrade kernel-rt-64kUpgrade kernel-rt-debugUpgrade kernel-rt-coreUpgrade kernel-rt-debug-core | May 27, 2025 | Apr 1, 2025 |
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfoUpgrade perf-debuginfoUpgrade kernel-headersUpgrade kernel-livepatch-5.10.237-230.949Upgrade perfUpgrade python-perf-debuginfoUpgrade kernel-tools-develUpgrade kernel-tools-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfo-common-aarch64Upgrade kernel-livepatch-5.15.184-125.190Upgrade kernel-toolsUpgrade python-perfUpgrade kernel-develUpgrade kernelUpgrade bpftool | May 30, 2025 | Apr 1, 2025 |
| Amazon_linux_2023 | — | Upgrade kernel-livepatch-6.1.134-152.225Upgrade kernel-livepatch-6.1.134-150.224Upgrade kernel-livepatch-6.1.132-147.221Upgrade kernel-livepatch-6.1.131-143.221Upgrade kernel-livepatch-6.1.130-139.222 | Jul 4, 2025 | Apr 1, 2025 |
| Debian | — | Upgrade linux | May 15, 2025 | Apr 1, 2025 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-toolsUpgrade kernel-tools-libsUpgrade bpftoolUpgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade kernel | Jun 13, 2025 | Apr 1, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade bpftoolUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernel | Jul 21, 2025 | Apr 1, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade kernel-abi-stablelistsUpgrade kernelUpgrade python3-perfUpgrade bpftoolUpgrade kernel-toolsUpgrade kernel-tools-libs | Jul 1, 2025 | Apr 1, 2025 |
| Oracle_linux | — | Upgrade kernel | May 2, 2025 | Apr 1, 2025 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rtNo solution exists | May 1, 2025 | Apr 1, 2025 |
| Rocky_linux | — | Upgrade kernel-rt-modulesUpgrade kernel-zfcpdump-coreUpgrade kernel-rt-debuginfoUpgrade kernel-debug-devel-matchedUpgrade kernel-tools-libs-develUpgrade kernel-uki-virt-addonsUpgrade kernel-rt-modules-coreUpgrade rvUpgrade kernel-rtUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-rt-debug-modules-coreUpgrade libperf-debuginfoUpgrade kernel-devel-matchedUpgrade kernel-debug-modules-extraUpgrade kernel-rt-modules-extraUpgrade kernel-zfcpdump-modulesUpgrade libperfUpgrade kernel-toolsUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-rt-debug-coreUpgrade kernel-debug-modulesUpgrade kernel-uki-virtUpgrade kernel-zfcpdumpUpgrade kernel-debug-modules-coreUpgrade kernelUpgrade rtlaUpgrade kernel-zfcpdump-debuginfoUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-debug-debuginfoUpgrade kernel-tools-libsUpgrade kernel-modules-coreUpgrade python3-perfUpgrade perfUpgrade kernel-debuginfoUpgrade kernel-debug-debuginfoUpgrade kernel-develUpgrade perf-debuginfoUpgrade kernel-debugUpgrade kernel-cross-headersUpgrade kernel-tools-debuginfoUpgrade kernel-modules-extraUpgrade bpftoolUpgrade kernel-rt-kvmUpgrade kernel-rt-debug-modules-extraUpgrade kernel-debug-develUpgrade kernel-coreUpgrade kernel-rt-debug-kvmUpgrade kernel-rt-debug-develUpgrade kernel-rt-debugUpgrade kernel-rt-coreUpgrade kernel-debug-coreUpgrade kernel-modulesUpgrade kernel-headersUpgrade kernel-rt-develUpgrade python3-perf-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-debug-uki-virtUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-zfcpdump-devel | Jul 31, 2025 | Jul 29, 2025 |
| Suse | — | Upgrade kernel-azureUpgrade kernel-debug-develUpgrade kernel-obs-buildUpgrade kernel-rt-optionalUpgrade dtb-alteraUpgrade reiserfs-kmp-defaultUpgrade kernel-rt-extraUpgrade cluster-md-kmp-64kbUpgrade dlm-kmp-rtUpgrade dtb-mediatekUpgrade kernel-default-baseUpgrade kernel-64kb-optionalUpgrade kernel-devel-rtUpgrade dtb-sprdUpgrade kernel-64kb-develUpgrade dtb-lgUpgrade kernel-default-vdsoUpgrade kernel-defaultUpgrade kernel-develUpgrade kernel-debug-vdsoUpgrade dtb-rockchipUpgrade kernel-64kb-extraUpgrade kernel-debugUpgrade kselftests-kmp-rtUpgrade dlm-kmp-64kbUpgrade kernel-source-vanillaUpgrade dtb-caviumUpgrade dtb-nvidiaUpgrade cluster-md-kmp-rtUpgrade dtb-allwinnerUpgrade reiserfs-kmp-azureUpgrade ocfs2-kmp-defaultUpgrade dtb-broadcomUpgrade dtb-hisiliconUpgrade kernel-rt-develUpgrade dtb-amdUpgrade reiserfs-kmp-64kbUpgrade dtb-xilinxUpgrade dtb-renesasUpgrade kselftests-kmp-64kbUpgrade gfs2-kmp-defaultUpgrade kernel-rt_debug-develUpgrade dtb-appleUpgrade kselftests-kmp-azureUpgrade kernel-source-rtUpgrade gfs2-kmp-azureUpgrade ocfs2-kmp-64kbUpgrade kernel-azure-optionalUpgrade ocfs2-kmp-azureUpgrade kernel-default-livepatch-develUpgrade kernel-default-livepatchUpgrade kernel-default-optionalUpgrade dtb-freescaleUpgrade kselftests-kmp-defaultUpgrade kernel-symsUpgrade dlm-kmp-azureUpgrade dtb-amazonUpgrade kernel-default-base-rebuildUpgrade kernel-64kbUpgrade reiserfs-kmp-rtUpgrade dlm-kmp-defaultUpgrade kernel-obs-qaUpgrade kernel-docs-htmlUpgrade gfs2-kmp-rtUpgrade kernel-azure-extraUpgrade gfs2-kmp-64kbUpgrade kernel-syms-azureUpgrade kernel-source-azureUpgrade kernel-devel-azureUpgrade dtb-socionextUpgrade dtb-apmUpgrade kernel-rt_debug-vdsoUpgrade kernel-kvmsmall-develUpgrade kernel-rt-livepatch-develUpgrade kernel-default-manUpgrade kernel-azure-develUpgrade cluster-md-kmp-defaultUpgrade kernel-syms-rtUpgrade cluster-md-kmp-azureUpgrade kernel-sourceUpgrade kernel-rtUpgrade kernel-macrosUpgrade kernel-zfcpdumpUpgrade kernel-kvmsmall-vdsoUpgrade kernel-azure-vdsoUpgrade kernel-docsUpgrade dtb-exynosUpgrade dtb-amlogicUpgrade ocfs2-kmp-rtUpgrade dtb-qcomUpgrade dtb-armUpgrade kernel-default-extraUpgrade kernel-default-develUpgrade dtb-marvellUpgrade kernel-rt_debugUpgrade kernel-rt-vdsoUpgrade kernel-kvmsmall | Dec 5, 2025 | May 6, 2025 |
| Ubuntu | — | Upgrade linux-image-lowlatency-64k-6.11Upgrade linux-image-raspi-6.8Upgrade linux-image-generic-64k-6.8Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-azure-nvidiaUpgrade linux-image-azure-fde-6.11Upgrade linux-image-6.8.0-1039-aws-64kUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.11.0-28-genericUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-gke-64kUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-raspi-realtimeUpgrade linux-image-lowlatency-6.11Upgrade linux-image-generic-6.8Upgrade linux-image-oracle-6.8Upgrade linux-image-6.8.0-1039-awsUpgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-6.8.0-1037-ibmUpgrade linux-image-6.8.0-84-genericUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-gke-64k-6.8Upgrade linux-image-6.11.0-1018-azureUpgrade linux-image-6.8.0-1040-gcpUpgrade linux-image-ibmUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-6.8.0-84-lowlatencyUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-virtual-6.8Upgrade linux-image-6.11.0-1015-lowlatency-64kUpgrade linux-image-aws-lts-24.04Upgrade linux-image-realtime-hwe-22.04Upgrade linux-image-awsUpgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-azure-lts-24.04Upgrade linux-image-6.11.0-1016-gcpUpgrade linux-image-gcp-6.8Upgrade linux-image-6.8.0-84-generic-64kUpgrade linux-image-azure-fdeUpgrade linux-image-azure-fde-edgeUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.11.0-1016-gcp-64kUpgrade linux-image-6.8.0-85-generic-64kUpgrade linux-image-azure-6.11Upgrade linux-image-aws-64k-6.8Upgrade linux-image-ibm-classicUpgrade linux-image-nvidia-64kUpgrade linux-image-oracle-64kUpgrade linux-image-6.11.0-28-generic-64kUpgrade linux-image-6.8.0-1025-azure-nvidiaUpgrade linux-image-6.11.0-1018-azure-fdeUpgrade linux-image-6.8.0-1036-gke-64kUpgrade linux-image-6.8.0-1039-nvidia-64kUpgrade linux-image-oem-22.04bUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-gcpUpgrade linux-image-raspiUpgrade linux-image-oracleUpgrade linux-image-realtimeUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.11.0-1017-oracle-64kUpgrade linux-image-6.11.0-1015-lowlatencyUpgrade linux-image-6.8.0-1023-gkeopUpgrade linux-image-6.8.0-1037-oracleUpgrade linux-image-6.8.0-1039-nvidia-lowlatency-64kUpgrade linux-image-kvmUpgrade linux-image-ibm-6.8Upgrade linux-image-gcp-64kUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-gcp-64k-6.8Upgrade linux-image-6.8.0-1039-raspiUpgrade linux-image-gkeop-6.8Upgrade linux-image-6.8.0-1038-azureUpgrade linux-image-6.11.0-1011-realtimeUpgrade linux-image-6.8.1-1034-realtimeUpgrade linux-image-6.8.0-1036-azureUpgrade linux-image-azure-6.8Upgrade linux-image-lowlatencyUpgrade linux-image-6.8.0-85-genericUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-6.11.0-1015-awsUpgrade linux-image-genericUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-gke-6.8Upgrade linux-image-virtualUpgrade linux-image-6.8.0-1039-nvidia-lowlatencyUpgrade linux-image-oem-22.04Upgrade linux-image-azure-fde-6.8Upgrade linux-image-aws-6.8Upgrade linux-image-lowlatency-6.8Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-6.8.0-2031-raspi-realtimeUpgrade linux-image-6.8.0-1040-gcp-64kUpgrade linux-image-6.8.0-1037-oracle-64kUpgrade linux-image-6.11.0-1014-raspiUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-azureUpgrade linux-image-6.8.0-1036-azure-fdeUpgrade linux-image-oem-24.04bUpgrade linux-image-oem-22.04aUpgrade linux-image-6.11.0-1017-oracleUpgrade linux-image-6.8.0-1039-nvidiaUpgrade linux-image-6.11.0-1024-oemUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-azure-nvidia-lts-24.04Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-gkeUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-generic-64kUpgrade linux-image-azure-nvidia-6.8Upgrade linux-image-6.8.0-1036-gkeUpgrade linux-image-oem-22.04dUpgrade linux-image-realtime-6.8.1Upgrade linux-image-nvidia-6.8Upgrade linux-image-gkeopUpgrade linux-image-6.8.0-84-lowlatency-64kUpgrade linux-image-generic-lpaeUpgrade linux-image-nvidiaUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-aws-64kUpgrade linux-image-6.8.0-1038-azure-fdeUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-oem-22.04cUpgrade linux-image-lowlatency-64k-hwe-22.04 | Jun 26, 2025 | Apr 1, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub