In the Linux kernel, the following vulnerability has been resolved:
tls: stop recv() if initial process_rx_list gave us non-DATA
If we have a non-DATA record on the rx_list and another record of the same type still on the queue, we will end up merging them: - process_rx_list copies the non-DATA record - we start the loop and process the first available record since it's of the same type - we break out of the loop since the record was not DATA
Just check the record type and jump to the end in case process_rx_list did some work.
CVSS Details
- CVSS 3.1 Base Score: 8.2
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-tools-debuginfoUpgrade kernel-debuginfoUpgrade kernel-livepatch-5.10.213-201.855Upgrade kernel-develUpgrade perfUpgrade kernel-headersUpgrade kernel-livepatch-5.15.152-100.162Upgrade kernelUpgrade perf-debuginfoUpgrade kernel-tools-develUpgrade python-perf-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64Upgrade python-perfUpgrade bpftool-debuginfoUpgrade bpftool | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade kernel-livepatch-6.1.82-99.168Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-toolsUpgrade kernel-libbpf-develUpgrade kernel-headersUpgrade kernelUpgrade kernel-libbpf-staticUpgrade bpftool-debuginfoUpgrade kernel-modules-extra-commonUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade perf-debuginfoUpgrade kernel-modules-extraUpgrade kernel-libbpfUpgrade python3-perf-debuginfoUpgrade python3-perfUpgrade kernel-debuginfoUpgrade perfUpgrade bpftoolUpgrade kernel-tools-develUpgrade kernel-devel | Oct 16, 2025 | Aug 22, 2025 |
| Debian | — | Upgrade linux | Aug 25, 2025 | Aug 25, 2025 |
| Dell Powerstore Dsa2026115 | — | Upgrade Dell PowerStoreOS to the latest version | Feb 25, 2026 | Feb 24, 2026 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-tools-libsUpgrade kernelUpgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade python3-perf | Nov 12, 2025 | Nov 6, 2025 |
| Huawei Euleros 2_0_sp11 | — | Upgrade python3-perfUpgrade kernelUpgrade kernel-abi-stablelistsUpgrade bpftoolUpgrade kernel-tools-libsUpgrade kernel-tools | Dec 12, 2025 | Nov 6, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade bpftoolUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade kernel | Dec 12, 2025 | Nov 6, 2025 |
| Redhat_linux | — | Upgrade kernelNo solution existsUpgrade kernel-rt | Nov 14, 2025 | Aug 22, 2025 |
| Ubuntu | — | Upgrade linux-ibmUpgrade linux-raspi-realtimeUpgrade linux-intel-iotgUpgrade linux-oracle-5.15Upgrade linux-azure-fipsUpgrade linux-hwe-5.15Upgrade linux-azureUpgrade linux-xilinx-zynqmpUpgrade linux-nvidia-tegra-igxUpgrade linux-realtimeUpgrade linux-oracleUpgrade linux-intel-iotg-5.15Upgrade linux-gcp-5.15Upgrade linux-gcp-fipsUpgrade linux-gkeopUpgrade linux-nvidiaUpgrade linux-iotUpgrade linux-hwe-5.4Upgrade linux-aws-fipsUpgrade linux-kvmUpgrade linux-azure-fdeUpgrade linux-riscv-5.15Upgrade linux-azure-5.15Upgrade linux-gcp-5.4Upgrade linux-azure-5.4Upgrade linux-lowlatencyUpgrade linux-fipsUpgrade linuxUpgrade linux-aws-5.4Upgrade linux-raspi-5.4Upgrade linux-aws-5.15Upgrade linux-lowlatency-hwe-5.15Upgrade linux-awsUpgrade linux-bluefieldUpgrade linux-gkeUpgrade linux-nvidia-tegraUpgrade linux-gcpUpgrade linux-ibm-5.4Upgrade linux-intel-iot-realtimeUpgrade linux-ibm-5.15Upgrade linux-raspiUpgrade linux-nvidia-tegra-5.15Upgrade linux-oracle-5.4 | Aug 25, 2025 | Aug 22, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 10, 2025 | Aug 22, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub