In the Linux kernel, the following vulnerability has been resolved:
net: tls: avoid hanging tasks on the tx_lock
syzbot sent a hung task report and Eric explains that adversarial receiver may keep RWIN at 0 for a long time, so we are not guaranteed to make forward progress. Thread which took tx_lock and went to sleep may not release tx_lock for hours. Use interruptible sleep where possible and reschedule the work if it can't take the lock.
Testing: existing selftest passes
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfoUpgrade kernel-headersUpgrade python-perf-debuginfoUpgrade perfUpgrade kernel-tools-develUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-develUpgrade kernelUpgrade kernel-tools-debuginfoUpgrade kernel-livepatch-5.10.173-154.642Upgrade bpftool-debuginfoUpgrade python-perfUpgrade kernel-livepatch-5.15.102-61.139Upgrade perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade bpftoolUpgrade kernel-tools | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade python3-perfUpgrade kernelUpgrade kernel-tools-develUpgrade kernel-toolsUpgrade kernel-headersUpgrade perf-debuginfoUpgrade kernel-libbpf-develUpgrade perfUpgrade kernel-livepatch-6.1.19-30.43Upgrade kernel-develUpgrade kernel-debuginfo-common-x86_64Upgrade python3-perf-debuginfoUpgrade kernel-libbpf-staticUpgrade kernel-libbpfUpgrade bpftoolUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-debuginfoUpgrade kernel-tools-debuginfoUpgrade bpftool-debuginfo | Feb 20, 2026 | Dec 30, 2025 |
| Debian | — | Upgrade linux | Dec 31, 2025 | Dec 31, 2025 |
| Redhat_linux | — | No solution exists | Jul 17, 2026 | Dec 30, 2025 |
| Ubuntu | — | Upgrade linux-ibm-5.15Upgrade linux-kvmUpgrade linux-intel-iotgUpgrade linux-gcp-5.15Upgrade linux-gcp-fipsUpgrade linux-riscv-5.15Upgrade linux-intel-iotg-5.15Upgrade linux-nvidia-tegraUpgrade linux-raspi-5.4Upgrade linux-xilinx-zynqmpUpgrade linux-lowlatency-hwe-5.15Upgrade linux-gcpUpgrade linux-hwe-5.4Upgrade linux-oracleUpgrade linux-bluefieldUpgrade linux-intel-iot-realtimeUpgrade linux-nvidia-tegra-igxUpgrade linux-awsUpgrade linux-gcp-5.4Upgrade linux-fipsUpgrade linux-nvidiaUpgrade linux-realtimeUpgrade linux-oracle-5.15Upgrade linux-nvidia-tegra-5.15Upgrade linux-azure-fipsUpgrade linux-oracle-5.4Upgrade linux-aws-fipsUpgrade linux-azureUpgrade linux-hwe-5.15Upgrade linux-iotUpgrade linux-aws-5.15Upgrade linux-ibmUpgrade linux-azure-5.15Upgrade linux-gkeopUpgrade linuxUpgrade linux-ibm-5.4Upgrade linux-azure-5.4Upgrade linux-lowlatencyUpgrade linux-gkeUpgrade linux-aws-5.4Upgrade linux-raspi | Jan 6, 2026 | Jan 2, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | May 27, 2026 | Dec 30, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub