The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
In the Linux kernel, the following vulnerability has been resolved:
tls: always refresh the queue when reading sock
After recent changes in net-next TCP compacts skbs much more aggressively. This unearthed a bug in TLS where we may try to operate on an old skb when checking if all skbs in the queue have matching decrypt state and geometry.
BUG: KASAN: slab-use-after-free in tls_strp_check_rcv+0x898/0x9a0 [tls] (net/tls/tls_strp.c:436 net/tls/tls_strp.c:530 net/tls/tls_strp.c:544) Read of size 4 at addr ffff888013085750 by task tls/13529
CPU: 2 UID: 0 PID: 13529 Comm: tls Not tainted 6.16.0-rc5-virtme Call Trace: kasan_report+0xca/0x100 tls_strp_check_rcv+0x898/0x9a0 [tls] tls_rx_rec_wait+0x2c9/0x8d0 [tls] tls_sw_recvmsg+0x40f/0x1aa0 [tls] inet_recvmsg+0x1c3/0x1f0
Always reload the queue, fast path is to have the record in the queue when we wake, anyway (IOW the path going down "if !strp->stm.full_len").
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-64k-debug-coreUpgrade kernel-64kUpgrade kernel-rt-64k-debug-develUpgrade kernel-64k-debug-modules-coreUpgrade kernel-rt-64k-develUpgrade kernel-rtUpgrade kernel-rt-modules-extraUpgrade kernel-zfcpdump-coreUpgrade rvUpgrade kernel-debug-modules-coreUpgrade kernel-rt-64k-modulesUpgrade kernel-debug-modulesUpgrade python3-perfUpgrade kernel-develUpgrade kernel-64k-debug-develUpgrade kernel-toolsUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-uki-virt-addonsUpgrade kernelUpgrade kernel-tools-libs-develUpgrade kernel-cross-headersUpgrade kernel-rt-modules-coreUpgrade kernel-zfcpdump-modulesUpgrade kernel-rt-64k-modules-coreUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-rt-debug-coreUpgrade kernel-rt-kvmUpgrade kernel-rt-develUpgrade kernel-64k-devel-matchedUpgrade kernel-rt-64k-debugUpgrade kernel-tools-libsUpgrade kernel-rt-64k-debug-coreUpgrade kernel-64k-debugUpgrade kernel-rt-64k-coreUpgrade kernel-rt-64kUpgrade kernel-rt-debugUpgrade kernel-64k-debug-modulesUpgrade kernel-64k-modules-extraUpgrade kernel-64k-modulesUpgrade kernel-debug-devel-matchedUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-debug-develUpgrade kernel-headersUpgrade kernel-64k-coreUpgrade perfUpgrade kernel-abi-stablelistsUpgrade kernel-rt-coreUpgrade kernel-rt-64k-modules-extraUpgrade rtlaUpgrade kernel-rt-modulesUpgrade kernel-docUpgrade kernel-debugUpgrade kernel-rt-debug-modules-extraUpgrade kernel-modulesUpgrade libperfUpgrade kernel-coreUpgrade kernel-uki-virtUpgrade kernel-debug-coreUpgrade kernel-zfcpdumpUpgrade kernel-debug-develUpgrade kernel-rt-64k-debug-modules-coreUpgrade kernel-rt-debug-kvmUpgrade kernel-64k-debug-modules-extraUpgrade kernel-rt-64k-debug-modules-extraUpgrade kernel-rt-debug-modules-coreUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-debug-modules-extraUpgrade kernel-64k-develUpgrade kernel-64k-modules-coreUpgrade kernel-modules-extraUpgrade kernel-modules-coreUpgrade kernel-debug-uki-virtUpgrade kernel-rt-64k-debug-modulesUpgrade kernel-devel-matchedUpgrade kernel-zfcpdump-devel | Aug 25, 2025 | Aug 18, 2025 |
| Amazon_linux_2023 | — | Upgrade python3-perf6.12Upgrade python3-perfUpgrade kernel-libbpfUpgrade kernel-debuginfo-common-aarch64Upgrade kernel6.12-develUpgrade perfUpgrade kernel6.12Upgrade kernel6.12-libbpf-staticUpgrade bpftoolUpgrade kernel-modules-extraUpgrade bpftool6.12-debuginfoUpgrade python3-perf-debuginfoUpgrade kernel-tools-develUpgrade python3-perf6.12-debuginfoUpgrade kernel-toolsUpgrade perf6.12-debuginfoUpgrade kernel-develUpgrade kernel6.12-libbpfUpgrade kernel-libbpf-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel6.12-libbpf-debuginfoUpgrade perf-debuginfoUpgrade kernel6.12-tools-develUpgrade bpftool6.12Upgrade kernel-libbpf-staticUpgrade kernel6.12-libbpf-develUpgrade kernelUpgrade kernel6.12-debuginfo-common-aarch64Upgrade perf6.12Upgrade kernel6.12-debuginfo-common-x86_64Upgrade kernel-debuginfoUpgrade kernel6.12-headersUpgrade kernel-livepatch-6.12.40-63.114Upgrade bpftool-debuginfoUpgrade kernel6.12-modules-extraUpgrade kernel-libbpf-develUpgrade kernel-headersUpgrade kernel-modules-extra-commonUpgrade kernel6.12-tools-debuginfoUpgrade kernel6.12-toolsUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-livepatch-6.1.147-172.266Upgrade kernel6.12-modules-extra-commonUpgrade kernel6.12-debuginfo | Sep 16, 2025 | Jul 28, 2025 |
| Debian | — | Upgrade linux-6.1Upgrade linux | Jul 31, 2025 | Jul 31, 2025 |
| Oracle_linux | — | Upgrade kernel | Aug 21, 2025 | Jul 28, 2025 |
| Redhat_linux | — | No solution existsUpgrade kernel-rtUpgrade kernel | Jul 31, 2025 | Jul 28, 2025 |
| Suse | — | Upgrade kernel-obs-buildUpgrade cluster-md-kmp-rtUpgrade dtb-mediatekUpgrade ocfs2-kmp-defaultUpgrade kernel-default-vdsoUpgrade dtb-rockchipUpgrade gfs2-kmp-azureUpgrade kselftests-kmp-64kbUpgrade dtb-armUpgrade reiserfs-kmp-azureUpgrade kernel-default-optionalUpgrade dlm-kmp-64kbUpgrade kernel-default-base-rebuildUpgrade kernel-rt-develUpgrade dtb-qcomUpgrade dtb-nvidiaUpgrade kernel-sourceUpgrade kernel-rtUpgrade kernel-devel-rtUpgrade dtb-xilinxUpgrade kernel-develUpgrade dtb-allwinnerUpgrade dtb-apmUpgrade kernel-rt-extraUpgrade dtb-alteraUpgrade kernel-kvmsmallUpgrade dlm-kmp-rtUpgrade kernel-obs-qaUpgrade kernel-syms-azureUpgrade kernel-defaultUpgrade kselftests-kmp-defaultUpgrade cluster-md-kmp-64kbUpgrade dtb-exynosUpgrade kernel-debug-vdsoUpgrade dtb-sprdUpgrade kernel-devel-azureUpgrade dtb-caviumUpgrade kernel-64kb-develUpgrade kernel-azure-develUpgrade dtb-appleUpgrade dtb-socionextUpgrade kernel-azure-vdsoUpgrade kernel-macrosUpgrade kernel-debug-develUpgrade kernel-zfcpdumpUpgrade dtb-renesasUpgrade kernel-kvmsmall-vdsoUpgrade kernel-default-develUpgrade kernel-rt_debug-vdsoUpgrade kernel-debugUpgrade kernel-default-livepatch-develUpgrade gfs2-kmp-64kbUpgrade dlm-kmp-defaultUpgrade kernel-azureUpgrade kernel-default-baseUpgrade dtb-marvellUpgrade gfs2-kmp-defaultUpgrade kernel-rt_debug-develUpgrade kernel-default-livepatchUpgrade dtb-amdUpgrade kernel-azure-optionalUpgrade kernel-azure-extraUpgrade dtb-broadcomUpgrade ocfs2-kmp-64kbUpgrade kernel-default-extraUpgrade cluster-md-kmp-defaultUpgrade cluster-md-kmp-azureUpgrade reiserfs-kmp-defaultUpgrade kernel-64kb-optionalUpgrade dtb-freescaleUpgrade dtb-amlogicUpgrade reiserfs-kmp-rtUpgrade kernel-rt-optionalUpgrade kernel-docs-htmlUpgrade kselftests-kmp-rtUpgrade kernel-source-azureUpgrade kernel-rt-livepatch-develUpgrade kernel-64kb-extraUpgrade dtb-hisiliconUpgrade kernel-source-rtUpgrade kernel-source-vanillaUpgrade kernel-symsUpgrade kernel-kvmsmall-develUpgrade kernel-docsUpgrade gfs2-kmp-rtUpgrade dtb-lgUpgrade dlm-kmp-azureUpgrade reiserfs-kmp-64kbUpgrade kselftests-kmp-azureUpgrade kernel-64kbUpgrade dtb-amazonUpgrade ocfs2-kmp-rtUpgrade ocfs2-kmp-azureUpgrade kernel-syms-rtUpgrade kernel-rt_debugUpgrade kernel-rt-vdso | Dec 5, 2025 | Aug 27, 2025 |
| Ubuntu | — | Upgrade linux-image-generic-64k-6.14Upgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-6.14.0-1020-gcpUpgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-ibmUpgrade linux-image-oem-22.04aUpgrade linux-image-oracle-64k-6.14Upgrade linux-image-awsUpgrade linux-image-6.14.0-1017-aws-64kUpgrade linux-image-lowlatency-64kUpgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-6.8.0-1051-azureUpgrade linux-image-6.14.0-36-generic-64kUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-azure-lts-24.04Upgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-generic-lpaeUpgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-lowlatencyUpgrade linux-image-oem-6.14Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1046-azureUpgrade linux-image-6.14.0-1017-awsUpgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-nvidia-6.8Upgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-gkeop-6.8Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-azure-6.14Upgrade linux-image-gcp-6.8Upgrade linux-image-genericUpgrade linux-image-nvidiaUpgrade linux-image-6.8.0-100-genericUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-gke-64kUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-oem-22.04Upgrade linux-image-fipsUpgrade linux-image-oracleUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-ibm-classicUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-gkeopUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-oracle-6.14Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-virtualUpgrade linux-image-aws-fipsUpgrade linux-image-lowlatency-6.8Upgrade linux-image-aws-fips-6.8Upgrade linux-image-6.14.0-1018-raspiUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-6.8.0-100-fipsUpgrade linux-image-aws-6.8Upgrade linux-image-6.14.0-1017-oracleUpgrade linux-image-xilinx-6.8Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-oem-24.04Upgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-gke-64k-6.8Upgrade linux-image-kvmUpgrade linux-image-gke-6.8Upgrade linux-image-oem-22.04cUpgrade linux-image-gcpUpgrade linux-image-6.14.0-1016-realtimeUpgrade linux-image-virtual-6.8Upgrade linux-image-realtime-6.8.1Upgrade linux-image-gcp-fipsUpgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-gcp-fips-6.8Upgrade linux-image-azure-6.8Upgrade linux-image-gcp-64k-6.8Upgrade linux-image-aws-64k-6.8Upgrade linux-image-raspi-6.14Upgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-6.14.0-1020-gcp-64kUpgrade linux-image-aws-64kUpgrade linux-image-aws-64k-6.14Upgrade linux-image-gkeUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-azureUpgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-intel-iotgUpgrade linux-image-oem-22.04dUpgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-generic-6.8Upgrade linux-image-realtime-6.14Upgrade linux-image-raspi-6.8Upgrade linux-image-oem-24.04aUpgrade linux-image-nvidia-64kUpgrade linux-image-ibm-6.8Upgrade linux-image-gcp-64k-6.14Upgrade linux-image-gcp-64kUpgrade linux-image-aws-6.14Upgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-6.14.0-1017-oracle-64kUpgrade linux-image-oracle-6.8Upgrade linux-image-generic-6.14Upgrade linux-image-oracle-64kUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-virtual-6.14Upgrade linux-image-gcp-6.14Upgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-intel-iot-realtimeUpgrade linux-image-generic-64kUpgrade linux-image-fips-6.8Upgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-6.14.0-1017-azureUpgrade linux-image-6.14.0-1016-oemUpgrade linux-image-generic-64k-6.8Upgrade linux-image-raspi-realtimeUpgrade linux-image-azure-fipsUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-realtime-hwe-24.04Upgrade linux-image-raspiUpgrade linux-image-6.14.0-36-genericUpgrade linux-image-aws-lts-24.04Upgrade linux-image-realtime-hwe-22.04Upgrade linux-image-realtimeUpgrade linux-image-oem-22.04bUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-xilinxUpgrade linux-image-azure-fips-6.8Upgrade linux-image-6.8.0-1046-aws | Jul 31, 2025 | Jul 28, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Aug 20, 2025 | Jul 28, 2025 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub