In the Linux kernel, the following vulnerability has been resolved:
crypto: lib/mpi - avoid null pointer deref in mpi_cmp_ui()
During NVMeTCP Authentication a controller can trigger a kernel oops by specifying the 8192 bit Diffie Hellman group and passing a correctly sized, but zeroed Diffie Hellamn value. mpi_cmp_ui() was detecting this if the second parameter was 0, but 1 is passed from dh_is_pubkey_valid(). This causes the null pointer u->d to be dereferenced towards the end of mpi_cmp_ui()
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade bpftoolUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-livepatch-4.14.326-245.539Upgrade bpftool-debuginfoUpgrade python-perfUpgrade kernel-livepatch-5.10.197-186.748Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-toolsUpgrade perfUpgrade kernel-develUpgrade kernel-livepatch-5.15.133-86.144Upgrade kernel-headersUpgrade kernel-tools-debuginfoUpgrade python-perf-debuginfoUpgrade kernelUpgrade kernel-tools-develUpgrade kernel-debuginfoUpgrade perf-debuginfo | May 20, 2026 | May 20, 2026 |
| Debian | — | Upgrade linux | Dec 10, 2025 | Dec 10, 2025 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade python3-perfUpgrade kernel-tools-libs | Mar 17, 2026 | Mar 16, 2026 |
| Huawei Euleros 2_0_sp13 | — | Upgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade python3-perfUpgrade kernelUpgrade bpftoolUpgrade kernel-tools-libs | Mar 10, 2026 | Mar 10, 2026 |
| Ubuntu | — | Upgrade linux-raspi-5.4Upgrade linux-bluefieldUpgrade linux-azure-5.4Upgrade linux-intel-iot-realtimeUpgrade linux-gcp-5.4Upgrade linux-iotUpgrade linux-hwe-5.4Upgrade linux-nvidia-tegra-5.15Upgrade linux-realtimeUpgrade linux-gcp-fipsUpgrade linux-lowlatency-hwe-5.15Upgrade linux-awsUpgrade linux-gcpUpgrade linux-nvidia-tegra-igxUpgrade linux-gcp-5.15Upgrade linux-nvidiaUpgrade linux-gkeopUpgrade linux-azure-fde-5.15Upgrade linux-intel-iotg-5.15Upgrade linux-intel-iotgUpgrade linux-ibm-5.15Upgrade linux-oracleUpgrade linux-kvmUpgrade linux-ibm-5.4Upgrade linux-xilinx-zynqmpUpgrade linuxUpgrade linux-fipsUpgrade linux-nvidia-tegraUpgrade linux-oracle-5.4Upgrade linux-lowlatencyUpgrade linux-hwe-5.15Upgrade linux-aws-fipsUpgrade linux-riscv-5.15Upgrade linux-aws-5.4Upgrade linux-azureUpgrade linux-oracle-5.15Upgrade linux-ibmUpgrade linux-azure-5.15Upgrade linux-gkeUpgrade linux-aws-5.15Upgrade linux-raspiUpgrade linux-azure-fips | Dec 11, 2025 | Dec 9, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | May 27, 2026 | Dec 9, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub