In the Linux kernel, the following vulnerability has been resolved:
tls: always refresh the queue when reading sock
After recent changes in net-next TCP compacts skbs much more aggressively. This unearthed a bug in TLS where we may try to operate on an old skb when checking if all skbs in the queue have matching decrypt state and geometry.
BUG: KASAN: slab-use-after-free in tls_strp_check_rcv+0x898/0x9a0 [tls] (net/tls/tls_strp.c:436 net/tls/tls_strp.c:530 net/tls/tls_strp.c:544) Read of size 4 at addr ffff888013085750 by task tls/13529
CPU: 2 UID: 0 PID: 13529 Comm: tls Not tainted 6.16.0-rc5-virtme Call Trace: kasan_report+0xca/0x100 tls_strp_check_rcv+0x898/0x9a0 [tls] tls_rx_rec_wait+0x2c9/0x8d0 [tls] tls_sw_recvmsg+0x40f/0x1aa0 [tls] inet_recvmsg+0x1c3/0x1f0
Always reload the queue, fast path is to have the record in the queue when we wake, anyway (IOW the path going down "if !strp->stm.full_len").
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-rt-64k-modules-coreUpgrade kernel-zfcpdump-modulesUpgrade kernel-uki-virt-addonsUpgrade kernel-64k-debug-develUpgrade kernel-debug-modulesUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-cross-headersUpgrade kernel-tools-libs-develUpgrade kernel-rt-64k-debug-develUpgrade kernel-toolsUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-rt-modules-extraUpgrade kernel-64k-debug-coreUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-rtUpgrade kernel-rt-64k-develUpgrade kernel-develUpgrade python3-perfUpgrade kernel-debug-modules-coreUpgrade kernel-64k-debug-modulesUpgrade kernel-rt-64k-coreUpgrade kernel-zfcpdump-coreUpgrade kernel-64k-devel-matchedUpgrade kernel-64k-debug-modules-coreUpgrade kernel-tools-libsUpgrade kernel-rt-develUpgrade kernel-rt-debug-coreUpgrade kernelUpgrade kernel-rt-64k-modulesUpgrade kernel-rt-64k-debugUpgrade kernel-rt-64k-debug-coreUpgrade kernel-rt-modules-coreUpgrade rvUpgrade kernel-64kUpgrade kernel-rt-64kUpgrade kernel-64k-debugUpgrade kernel-rt-kvmUpgrade kernel-64k-modulesUpgrade kernel-rt-debugUpgrade kernel-64k-modules-extraUpgrade kernel-rt-debug-modulesUpgrade kernel-64k-modules-coreUpgrade kernel-debug-modules-extraUpgrade kernel-64k-coreUpgrade kernel-zfcpdump-develUpgrade kernel-devel-matchedUpgrade kernel-rt-64k-debug-modulesUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-zfcpdumpUpgrade kernel-modulesUpgrade kernel-debug-devel-matchedUpgrade kernel-coreUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-modulesUpgrade kernel-debugUpgrade perfUpgrade kernel-rt-coreUpgrade kernel-docUpgrade kernel-64k-develUpgrade kernel-rt-debug-kvmUpgrade kernel-rt-64k-debug-modules-extraUpgrade kernel-debug-develUpgrade kernel-rt-64k-modules-extraUpgrade kernel-debug-coreUpgrade rtlaUpgrade libperfUpgrade kernel-abi-stablelistsUpgrade kernel-64k-debug-modules-extraUpgrade kernel-modules-coreUpgrade kernel-rt-64k-debug-modules-coreUpgrade kernel-modules-extraUpgrade kernel-uki-virtUpgrade kernel-rt-debug-modules-coreUpgrade kernel-rt-debug-develUpgrade kernel-headersUpgrade kernel-debug-uki-virt | Aug 25, 2025 | Aug 18, 2025 |
| Amazon_linux_2023 | — | Upgrade kernel6.12-debuginfo-common-x86_64Upgrade kernel-headersUpgrade kernel6.12-modules-extra-commonUpgrade kernel6.12-tools-debuginfoUpgrade perf6.12Upgrade kernel6.12-debuginfo-common-aarch64Upgrade kernel6.12-headersUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade bpftool-debuginfoUpgrade kernel6.12-toolsUpgrade bpftool6.12Upgrade kernel6.12-libbpf-develUpgrade kernel-libbpf-develUpgrade kernel6.12-debuginfoUpgrade kernel-livepatch-6.1.147-172.266Upgrade kernel6.12-modules-extraUpgrade kernel-libbpf-staticUpgrade kernel-modules-extra-commonUpgrade kernel6.12-tools-develUpgrade kernel-debuginfoUpgrade kernel-livepatch-6.12.40-63.114Upgrade perf6.12-debuginfoUpgrade kernel-modules-extraUpgrade kernel6.12-libbpfUpgrade kernel-develUpgrade python3-perf6.12Upgrade python3-perfUpgrade kernel6.12-develUpgrade kernel-libbpfUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-debuginfoUpgrade kernel-toolsUpgrade perfUpgrade kernel6.12-libbpf-debuginfoUpgrade kernel-libbpf-debuginfoUpgrade kernel-tools-develUpgrade bpftool6.12-debuginfoUpgrade python3-perf6.12-debuginfoUpgrade python3-perf-debuginfoUpgrade perf-debuginfoUpgrade kernel6.12-libbpf-staticUpgrade bpftoolUpgrade kernel6.12 | Sep 16, 2025 | Jul 28, 2025 |
| Debian | — | Upgrade linux-6.1Upgrade linux | Jul 31, 2025 | Jul 31, 2025 |
| Oracle_linux | — | Upgrade kernel | Aug 21, 2025 | Jul 28, 2025 |
| Redhat_linux | — | No solution existsUpgrade kernel-rtUpgrade kernel | Jul 31, 2025 | Jul 28, 2025 |
| Suse | — | Upgrade kernel-rt-vdsoUpgrade kernel-rt_debugUpgrade dtb-amazonUpgrade kernel-syms-rtUpgrade kernel-kvmsmall-vdsoUpgrade kernel-rt_debug-vdsoUpgrade dtb-socionextUpgrade dtb-amlogicUpgrade kernel-default-develUpgrade kernel-default-livepatch-develUpgrade kernel-macrosUpgrade gfs2-kmp-64kbUpgrade ocfs2-kmp-rtUpgrade kernel-64kbUpgrade kernel-debugUpgrade kernel-source-rtUpgrade ocfs2-kmp-azureUpgrade reiserfs-kmp-rtUpgrade dtb-appleUpgrade dtb-lgUpgrade dtb-renesasUpgrade reiserfs-kmp-defaultUpgrade dtb-freescaleUpgrade dtb-hisiliconUpgrade kernel-64kb-extraUpgrade kernel-azure-vdsoUpgrade kernel-rt-livepatch-develUpgrade kernel-docsUpgrade kernel-kvmsmall-develUpgrade kernel-debug-develUpgrade kselftests-kmp-azureUpgrade reiserfs-kmp-64kbUpgrade gfs2-kmp-rtUpgrade kernel-zfcpdumpUpgrade kernel-azureUpgrade kernel-default-extraUpgrade kernel-docs-htmlUpgrade kernel-azure-optionalUpgrade cluster-md-kmp-azureUpgrade cluster-md-kmp-defaultUpgrade dtb-broadcomUpgrade kernel-symsUpgrade dlm-kmp-defaultUpgrade dtb-marvellUpgrade gfs2-kmp-defaultUpgrade kernel-rt_debug-develUpgrade kernel-default-baseUpgrade kernel-default-livepatchUpgrade kernel-rt-optionalUpgrade kernel-64kb-optionalUpgrade ocfs2-kmp-64kbUpgrade dlm-kmp-azureUpgrade kernel-source-azureUpgrade kernel-source-vanillaUpgrade kernel-azure-extraUpgrade kselftests-kmp-rtUpgrade dtb-amdUpgrade kernel-64kb-develUpgrade kernel-default-base-rebuildUpgrade kernel-rtUpgrade dlm-kmp-rtUpgrade dtb-mediatekUpgrade cluster-md-kmp-rtUpgrade ocfs2-kmp-defaultUpgrade gfs2-kmp-azureUpgrade dtb-rockchipUpgrade kernel-default-optionalUpgrade dtb-xilinxUpgrade dtb-qcomUpgrade kernel-rt-develUpgrade kernel-devel-rtUpgrade kernel-devel-azureUpgrade dtb-sprdUpgrade kernel-syms-azureUpgrade kernel-obs-qaUpgrade kernel-defaultUpgrade kernel-debug-vdsoUpgrade dtb-exynosUpgrade cluster-md-kmp-64kbUpgrade dtb-alteraUpgrade kernel-sourceUpgrade kselftests-kmp-defaultUpgrade kselftests-kmp-64kbUpgrade kernel-obs-buildUpgrade dtb-allwinnerUpgrade kernel-default-vdsoUpgrade kernel-rt-extraUpgrade dtb-armUpgrade dlm-kmp-64kbUpgrade reiserfs-kmp-azureUpgrade dtb-caviumUpgrade kernel-develUpgrade dtb-nvidiaUpgrade kernel-azure-develUpgrade kernel-kvmsmallUpgrade dtb-apm | Dec 5, 2025 | Aug 27, 2025 |
| Ubuntu | — | Upgrade linux-image-oracle-6.8Upgrade linux-image-virtual-6.14Upgrade linux-image-6.14.0-1016-realtimeUpgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-aws-fips-6.8Upgrade linux-image-6.8.0-1046-awsUpgrade linux-image-aws-6.8Upgrade linux-image-aws-64kUpgrade linux-image-gke-64k-6.8Upgrade linux-image-kvmUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-gcpUpgrade linux-image-6.14.0-1017-oracleUpgrade linux-image-6.14.0-1018-raspiUpgrade linux-image-xilinx-6.8Upgrade linux-image-azure-fips-6.8Upgrade linux-image-gke-6.8Upgrade linux-image-gcp-fipsUpgrade linux-image-generic-6.14Upgrade linux-image-oem-24.04Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-raspi-6.8Upgrade linux-image-generic-6.8Upgrade linux-image-nvidia-64kUpgrade linux-image-oem-24.04aUpgrade linux-image-realtime-6.14Upgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-aws-64k-6.14Upgrade linux-image-gkeUpgrade linux-image-oem-22.04dUpgrade linux-image-ibm-6.8Upgrade linux-image-oem-22.04bUpgrade linux-image-gcp-64k-6.14Upgrade linux-image-6.14.0-1016-oemUpgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-aws-6.14Upgrade linux-image-gcp-64kUpgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-6.14.0-1017-oracle-64kUpgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-aws-lts-24.04Upgrade linux-image-intel-iot-realtimeUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-azure-6.8Upgrade linux-image-oem-22.04cUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-raspiUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-6.14.0-1020-gcp-64kUpgrade linux-image-6.14.0-36-genericUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-gcp-6.14Upgrade linux-image-xilinxUpgrade linux-image-aws-64k-6.8Upgrade linux-image-gcp-64k-6.8Upgrade linux-image-gcp-fips-6.8Upgrade linux-image-virtual-6.8Upgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-realtimeUpgrade linux-image-realtime-hwe-22.04Upgrade linux-image-generic-64kUpgrade linux-image-oracle-64kUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.8.0-100-fipsUpgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-6.14.0-1017-azureUpgrade linux-image-intel-iotgUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-raspi-realtimeUpgrade linux-image-raspi-6.14Upgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-generic-64k-6.8Upgrade linux-image-fips-6.8Upgrade linux-image-azure-fipsUpgrade linux-image-azureUpgrade linux-image-realtime-6.8.1Upgrade linux-image-nvidiaUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-6.14.0-36-generic-64kUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-lowlatency-6.8Upgrade linux-image-gcp-6.8Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-aws-fipsUpgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-6.14.0-1017-awsUpgrade linux-image-oem-22.04aUpgrade linux-image-ibmUpgrade linux-image-azure-lts-24.04Upgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-oracle-64k-6.14Upgrade linux-image-6.8.0-1046-azureUpgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-oracle-6.14Upgrade linux-image-gkeop-6.8Upgrade linux-image-generic-lpaeUpgrade linux-image-lowlatencyUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-6.14.0-1020-gcpUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-oem-6.14Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-virtualUpgrade linux-image-azure-6.14Upgrade linux-image-6.8.0-100-genericUpgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-6.8.0-1051-azureUpgrade linux-image-nvidia-6.8Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-oem-22.04Upgrade linux-image-oracleUpgrade linux-image-ibm-classicUpgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-gkeopUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-gke-64kUpgrade linux-image-fipsUpgrade linux-image-6.14.0-1017-aws-64kUpgrade linux-image-awsUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-generic-64k-6.14Upgrade linux-image-generic | Jul 31, 2025 | Jul 28, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Aug 20, 2025 | Jul 28, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub