In the Linux kernel, the following vulnerability has been resolved:
tls: wait for pending async decryptions if tls_strp_msg_hold fails
Async decryption calls tls_strp_msg_hold to create a clone of the input skb to hold references to the memory it uses. If we fail to allocate that clone, proceeding with async decryption can lead to various issues (UAF on the skb, writing into userspace memory after the recv() call has returned).
In this case, wait for all pending decryption requests.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-rt-64kUpgrade kernel-docUpgrade kernel-devel-matchedUpgrade kernel-rt-debug-coreUpgrade kernel-zfcpdump-coreUpgrade kernel-64k-debug-modules-extraUpgrade kernel-debug-modulesUpgrade kernel-debug-modules-coreUpgrade kernel-64k-coreUpgrade kernel-toolsUpgrade kernel-uki-virt-addonsUpgrade kernel-64k-debug-modules-coreUpgrade kernel-rt-64k-modulesUpgrade kernel-64k-debugUpgrade kernel-zfcpdump-modulesUpgrade kernel-rt-64k-modules-extraUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-debug-modules-coreUpgrade kernel-zfcpdump-devel-matchedUpgrade libperfUpgrade kernel-debug-modules-extraUpgrade kernel-rt-64k-debug-develUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-64k-devel-matchedUpgrade kernel-uki-virtUpgrade kernel-rt-64k-debug-coreUpgrade kernel-debug-devel-matchedUpgrade kernel-rt-modulesUpgrade kernel-abi-stablelistsUpgrade kernel-zfcpdumpUpgrade kernel-rt-modules-extraUpgrade rvUpgrade kernel-tools-libs-develUpgrade kernel-rtUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-rt-modules-coreUpgrade kernel-64kUpgrade kernel-rt-64k-debug-modulesUpgrade kernel-debug-uki-virtUpgrade kernel-rt-64k-modules-coreUpgrade kernel-rt-64k-coreUpgrade python3-perfUpgrade kernel-64k-modules-extraUpgrade kernel-zfcpdump-modules-extraUpgrade kernelUpgrade kernel-rt-debug-modulesUpgrade kernel-tools-libsUpgrade kernel-64k-modules-coreUpgrade kernel-cross-headersUpgrade kernel-64k-modulesUpgrade kernel-coreUpgrade kernel-debugUpgrade kernel-64k-debug-develUpgrade kernel-rt-debug-develUpgrade kernel-rt-64k-debug-modules-extraUpgrade kernel-headersUpgrade kernel-64k-debug-coreUpgrade kernel-rt-debugUpgrade kernel-rt-64k-develUpgrade kernel-rt-64k-debug-modules-coreUpgrade kernel-64k-develUpgrade kernel-64k-debug-modulesUpgrade kernel-rt-develUpgrade kernel-modules-coreUpgrade kernel-modulesUpgrade kernel-develUpgrade kernel-zfcpdump-develUpgrade perfUpgrade kernel-debug-coreUpgrade kernel-rt-64k-debugUpgrade kernel-debug-develUpgrade kernel-modules-extraUpgrade kernel-rt-coreUpgrade rtla | Jan 8, 2026 | Dec 16, 2025 |
| Amazon_linux_2023 | — | Upgrade kernel-libbpf-develUpgrade kernel6.12-debuginfo-common-x86_64Upgrade kernel-libbpf-debuginfoUpgrade kernel-livepatch-6.1.158-178.288Upgrade python3-perf6.12Upgrade kernel-debuginfoUpgrade kernel-libbpfUpgrade python3-perf-debuginfoUpgrade kernel-libbpf-staticUpgrade kernel-modules-extraUpgrade kernel-debuginfo-common-x86_64Upgrade kernel6.12-tools-develUpgrade bpftool-debuginfoUpgrade kernel6.12-develUpgrade kernel-debuginfo-common-aarch64Upgrade perf6.12Upgrade kernel-develUpgrade kernel6.12-libbpf-debuginfoUpgrade kernel6.12-headersUpgrade kernelUpgrade bpftoolUpgrade kernel6.12-modules-extra-commonUpgrade kernel-tools-debuginfoUpgrade kernel6.12Upgrade kernel6.12-modules-extraUpgrade bpftool6.12Upgrade kernel6.12-libbpf-staticUpgrade kernel6.12-debuginfoUpgrade kernel-tools-develUpgrade kernel6.12-debuginfo-common-aarch64Upgrade perfUpgrade python3-perf6.12-debuginfoUpgrade kernel6.12-tools-debuginfoUpgrade kernel-livepatch-6.12.55-74.119Upgrade python3-perfUpgrade kernel-headersUpgrade kernel-toolsUpgrade kernel-modules-extra-commonUpgrade perf-debuginfoUpgrade bpftool6.12-debuginfoUpgrade perf6.12-debuginfoUpgrade kernel6.12-libbpf-develUpgrade kernel6.12-libbpfUpgrade kernel6.12-tools | Dec 9, 2025 | Nov 12, 2025 |
| Debian | — | Upgrade linux-6.1Upgrade linux | Nov 14, 2025 | Nov 14, 2025 |
| Oracle_linux | — | Upgrade kernel | Dec 22, 2025 | Nov 12, 2025 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernel | Dec 18, 2025 | Nov 12, 2025 |
| Rocky_linux | — | Upgrade kernel-tools-libs-develUpgrade kernel-tools-debuginfoUpgrade kernel-debugUpgrade kernel-debuginfoUpgrade kernel-zfcpdump-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-develUpgrade kernel-debug-modulesUpgrade kernel-debug-devel-matchedUpgrade python3-perfUpgrade python3-perf-debuginfoUpgrade kernel-debug-uki-virtUpgrade kernel-tools-libsUpgrade rtlaUpgrade kernel-zfcpdump-develUpgrade kernel-modules-coreUpgrade kernel-modules-extra-matchedUpgrade kernel-rt-coreUpgrade kernel-debug-modules-coreUpgrade kernel-rt-debug-coreUpgrade kernel-debug-develUpgrade kernel-rt-modules-extraUpgrade kernelUpgrade kernel-toolsUpgrade kernel-zfcpdump-modules-extraUpgrade perf-debuginfoUpgrade kernel-rt-debug-modules-coreUpgrade kernel-uki-virtUpgrade kernel-rtUpgrade rvUpgrade libperf-debuginfoUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-debuginfo-common-s390xUpgrade kernel-develUpgrade kernel-rt-debug-modulesUpgrade perfUpgrade kernel-rt-modulesUpgrade kernel-zfcpdump-coreUpgrade kernel-zfcpdumpUpgrade kernel-rt-debuginfoUpgrade kernel-rt-debug-modules-extraUpgrade kernel-modulesUpgrade kernel-debug-coreUpgrade kernel-coreUpgrade kernel-debug-modules-extraUpgrade kernel-rt-debugUpgrade kernel-zfcpdump-modulesUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-devel-matchedUpgrade kernel-debug-debuginfoUpgrade kernel-rt-modules-coreUpgrade kernel-rt-debug-develUpgrade kernel-modules-extraUpgrade libperfUpgrade kernel-uki-virt-addons | Jan 19, 2026 | Jan 17, 2026 |
| Ubuntu | — | Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-6.8.0-106-lowlatency-64kUpgrade linux-image-gcp-64kUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-realtimeUpgrade linux-image-6.8.0-1050-aws-fipsUpgrade linux-image-gkeUpgrade linux-image-gcp-64k-6.17Upgrade linux-image-oracle-64k-6.17Upgrade linux-image-virtual-6.8Upgrade linux-image-6.8.0-1052-azure-fipsUpgrade linux-image-6.8.0-1052-gcpUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-nvidia-64kUpgrade linux-image-aws-fips-6.8Upgrade linux-image-oem-22.04cUpgrade linux-image-oracle-6.8Upgrade linux-image-gcp-6.8Upgrade linux-image-6.17.0-14-genericUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-generic-64k-6.17Upgrade linux-image-6.8.0-1049-nvidia-64kUpgrade linux-image-gke-6.8Upgrade linux-image-awsUpgrade linux-image-oem-22.04dUpgrade linux-image-realtime-6.8.1Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-virtual-6.17Upgrade linux-image-6.17.0-1008-raspiUpgrade linux-image-6.8.0-106-fipsUpgrade linux-image-raspiUpgrade linux-image-raspi-6.8Upgrade linux-image-oem-6.17Upgrade linux-image-nvidia-6.8Upgrade linux-image-6.17.0-1007-awsUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-6.8.0-106-lowlatencyUpgrade linux-image-6.8.0-2040-raspi-realtimeUpgrade linux-image-6.8.0-1049-nvidiaUpgrade linux-image-aws-6.17Upgrade linux-image-xilinx-6.8Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-raspi-6.17Upgrade linux-image-6.8.0-1047-oracle-64kUpgrade linux-image-oracle-64kUpgrade linux-image-6.8.0-1049-nvidia-lowlatency-64kUpgrade linux-image-oracle-6.17Upgrade linux-image-aws-lts-24.04Upgrade linux-image-azureUpgrade linux-image-kvmUpgrade linux-image-gke-64kUpgrade linux-image-realtime-6.17Upgrade linux-image-6.17.0-1007-oracle-64kUpgrade linux-image-gcp-fipsUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-6.8.0-1029-xilinxUpgrade linux-image-gcp-6.17Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-gcp-fips-6.8Upgrade linux-image-gke-64k-6.8Upgrade linux-image-aws-6.8Upgrade linux-image-aws-64k-6.17Upgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-6.8.0-1052-gcp-64kUpgrade linux-image-6.8.0-1050-awsUpgrade linux-image-6.8.0-1048-gkeUpgrade linux-image-oem-22.04bUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-gkeopUpgrade linux-image-ibm-6.8Upgrade linux-image-6.8.0-106-genericUpgrade linux-image-genericUpgrade linux-image-6.8.0-1052-gcp-fipsUpgrade linux-image-6.17.0-1011-oemUpgrade linux-image-6.17.0-1007-gcpUpgrade linux-image-lowlatency-64kUpgrade linux-image-6.8.1-1045-realtimeUpgrade linux-image-6.8.0-1049-nvidia-lowlatencyUpgrade linux-image-intel-iotgUpgrade linux-image-gkeop-6.8Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-fips-6.8Upgrade linux-image-6.8.0-1035-gkeopUpgrade linux-image-6.17.0-1007-gcp-64kUpgrade linux-image-6.8.0-1047-oracleUpgrade linux-image-azure-6.17Upgrade linux-image-xilinxUpgrade linux-image-6.8.0-1051-azureUpgrade linux-image-raspi-realtimeUpgrade linux-image-azure-6.8Upgrade linux-image-6.8.0-1049-ibmUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-generic-6.8Upgrade linux-image-oracleUpgrade linux-image-azure-fips-6.8Upgrade linux-image-fipsUpgrade linux-image-6.8.0-1050-aws-64kUpgrade linux-image-azure-fipsUpgrade linux-image-aws-64k-6.8Upgrade linux-image-6.8.0-106-generic-64kUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-nvidiaUpgrade linux-image-generic-lpaeUpgrade linux-image-generic-64k-6.8Upgrade linux-image-virtualUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-aws-fipsUpgrade linux-image-6.17.0-1008-azureUpgrade linux-image-6.17.0-1007-oracleUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-lowlatency-6.8Upgrade linux-image-lowlatencyUpgrade linux-image-generic-6.17Upgrade linux-image-gcpUpgrade linux-image-oem-22.04aUpgrade linux-image-oem-22.04Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-6.8.0-1050-raspiUpgrade linux-image-6.8.0-1048-gke-64kUpgrade linux-image-realtime-hwe-22.04Upgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-ibm-classicUpgrade linux-image-ibmUpgrade linux-image-generic-64kUpgrade linux-image-azure-lts-24.04Upgrade linux-image-aws-64kUpgrade linux-image-6.17.0-14-generic-64kUpgrade linux-image-6.17.0-1007-aws-64kUpgrade linux-image-6.17.0-1006-realtimeUpgrade linux-image-oracle-64k-6.8 | Feb 13, 2026 | Feb 12, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Feb 9, 2026 | Nov 12, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub