In the Linux kernel, the following vulnerability has been resolved:
net: tls: explicitly disallow disconnect
syzbot discovered that it can disconnect a TLS socket and then run into all sort of unexpected corner cases. I have a vague recollection of Eric pointing this out to us a long time ago. Supporting disconnect is really hard, for one thing if offload is enabled we'd need to wait for all packets to be _acked_. Disconnect is not commonly used, disallow it.
The immediate problem syzbot run into is the warning in the strp, but that's just the easiest bug to trigger:
WARNING: CPU: 0 PID: 5834 at net/tls/tls_strp.c:486 tls_strp_msg_load+0x72e/0xa80 net/tls/tls_strp.c:486 RIP: 0010:tls_strp_msg_load+0x72e/0xa80 net/tls/tls_strp.c:486 Call Trace: <TASK> tls_rx_rec_wait+0x280/0xa60 net/tls/tls_sw.c:1363 tls_sw_recvmsg+0x85c/0x1c30 net/tls/tls_sw.c:2043 inet6_recvmsg+0x2c9/0x730 net/ipv6/af_inet6.c:678 sock_recvmsg_nosec net/socket.c:1023 [inline] sock_recvmsg+0x109/0x280 net/socket.c:1045 __sys_recvfrom+0x202/0x380 net/socket.c:2237
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfoUpgrade kernel-livepatch-5.15.182-123.190Upgrade kernel-livepatch-5.15.184-125.190Upgrade kernel-headersUpgrade python-perfUpgrade kernelUpgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade python-perf-debuginfoUpgrade perf-debuginfoUpgrade kernel-toolsUpgrade kernel-develUpgrade kernel-tools-debuginfoUpgrade perfUpgrade kernel-tools-develUpgrade kernel-debuginfo-common-aarch64Upgrade bpftoolUpgrade kernel-livepatch-5.10.237-230.949 | Jun 24, 2025 | May 1, 2025 |
| Amazon_linux_2023 | — | Upgrade python3-perf6.12-debuginfoUpgrade perfUpgrade kernel-debuginfo-common-aarch64Upgrade python3-perf-debuginfoUpgrade bpftoolUpgrade kernel-libbpf-develUpgrade kernel-libbpf-staticUpgrade kernelUpgrade kernel-libbpf-debuginfoUpgrade kernel-modules-extra-commonUpgrade perf6.12Upgrade kernel-toolsUpgrade kernel-tools-debuginfoUpgrade kernel6.12-debuginfoUpgrade kernel-livepatch-6.12.25-32.101Upgrade bpftool-debuginfoUpgrade kernel-debuginfoUpgrade perf-debuginfoUpgrade kernel-libbpfUpgrade kernel-modules-extraUpgrade kernel-livepatch-6.1.140-154.222Upgrade kernel-develUpgrade kernel-debuginfo-common-x86_64Upgrade perf6.12-debuginfoUpgrade kernel-tools-develUpgrade kernel6.12-debuginfo-common-aarch64Upgrade kernel6.12Upgrade python3-perfUpgrade kernel-headersUpgrade python3-perf6.12Upgrade kernel6.12-modules-extraUpgrade kernel6.12-debuginfo-common-x86_64 | Jun 24, 2025 | May 1, 2025 |
| Debian | — | Upgrade linux-6.1Upgrade linux | May 5, 2025 | May 1, 2025 |
| Huawei Euleros 2_0_sp11 | — | Upgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade bpftoolUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernel | Oct 14, 2025 | Oct 10, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-toolsUpgrade python3-perfUpgrade kernel-tools-libsUpgrade bpftoolUpgrade kernelUpgrade kernel-abi-stablelists | Nov 12, 2025 | Oct 10, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade kernelUpgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade python3-perfUpgrade kernel-tools-libsUpgrade bpftool | Oct 24, 2025 | Oct 10, 2025 |
| Oracle_linux | — | Upgrade kernel-uek | Jul 17, 2025 | May 1, 2025 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 1, 2025 |
| Suse | — | Upgrade kernel-obs-buildUpgrade kernel-default-extraUpgrade dtb-apmUpgrade dlm-kmp-64kbUpgrade kernel-default-manUpgrade dtb-exynosUpgrade kernel-obs-qaUpgrade dtb-qcomUpgrade kernel-rt-extraUpgrade kernel-source-rtUpgrade gfs2-kmp-rtUpgrade kernel-syms-azureUpgrade dtb-alteraUpgrade kernel-rt_debug-vdsoUpgrade kernel-kvmsmall-vdsoUpgrade kernel-sourceUpgrade dtb-rockchipUpgrade kernel-zfcpdumpUpgrade kselftests-kmp-64kbUpgrade kselftests-kmp-azureUpgrade dtb-armUpgrade reiserfs-kmp-64kbUpgrade kernel-macrosUpgrade kernel-rt-vdsoUpgrade reiserfs-kmp-azureUpgrade kernel-azure-vdsoUpgrade ocfs2-kmp-rtUpgrade kernel-devel-azureUpgrade kernel-default-vdsoUpgrade kernel-rt-livepatch-develUpgrade dtb-amlogicUpgrade kernel-azure-optionalUpgrade dtb-lgUpgrade kernel-default-base-rebuildUpgrade kernel-rtUpgrade kernel-source-azureUpgrade kernel-kvmsmall-develUpgrade cluster-md-kmp-azureUpgrade cluster-md-kmp-defaultUpgrade kernel-syms-rtUpgrade kernel-azure-develUpgrade kernel-kvmsmallUpgrade kernel-rt-optionalUpgrade gfs2-kmp-azureUpgrade kernel-debugUpgrade kselftests-kmp-rtUpgrade cluster-md-kmp-64kbUpgrade kernel-develUpgrade dtb-renesasUpgrade dtb-mediatekUpgrade kernel-default-optionalUpgrade gfs2-kmp-64kbUpgrade dtb-allwinnerUpgrade ocfs2-kmp-64kbUpgrade kselftests-kmp-defaultUpgrade kernel-source-vanillaUpgrade kernel-rt_debugUpgrade kernel-azureUpgrade kernel-default-baseUpgrade dtb-broadcomUpgrade dlm-kmp-defaultUpgrade kernel-64kb-extraUpgrade dtb-marvellUpgrade kernel-debug-vdsoUpgrade kernel-debug-develUpgrade dtb-amdUpgrade kernel-rt-develUpgrade kernel-defaultUpgrade reiserfs-kmp-rtUpgrade kernel-rt_debug-develUpgrade kernel-docsUpgrade kernel-default-livepatch-develUpgrade dtb-socionextUpgrade dlm-kmp-rtUpgrade dlm-kmp-azureUpgrade ocfs2-kmp-defaultUpgrade kernel-azure-extraUpgrade dtb-sprdUpgrade dtb-freescaleUpgrade dtb-amazonUpgrade reiserfs-kmp-defaultUpgrade kernel-64kb-develUpgrade gfs2-kmp-defaultUpgrade dtb-caviumUpgrade dtb-appleUpgrade cluster-md-kmp-rtUpgrade ocfs2-kmp-azureUpgrade kernel-64kb-optionalUpgrade dtb-hisiliconUpgrade kernel-symsUpgrade kernel-docs-htmlUpgrade kernel-devel-rtUpgrade kernel-64kbUpgrade dtb-xilinxUpgrade dtb-nvidiaUpgrade kernel-default-livepatchUpgrade kernel-default-devel | Dec 5, 2025 | Jul 8, 2025 |
| Ubuntu | — | Upgrade linux-image-genericUpgrade linux-image-6.8.0-1040-nvidia-lowlatency-64kUpgrade linux-image-nvidia-tegraUpgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-generic-64k-5.15Upgrade linux-image-6.8.0-85-lowlatency-64kUpgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-kvm-5.15Upgrade linux-image-oem-22.04aUpgrade linux-image-gcp-5.15Upgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-aws-lts-22.04Upgrade linux-image-5.15.0-1083-raspiUpgrade linux-image-ibm-classicUpgrade linux-image-5.15.0-1088-aws-fipsUpgrade linux-image-azure-fdeUpgrade linux-image-generic-lpaeUpgrade linux-image-lowlatencyUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-5.15.0-1030-nvidia-tegra-igx-rtUpgrade linux-image-5.15.0-1082-nvidia-lowlatencyUpgrade linux-image-generic-5.15Upgrade linux-image-6.14.0-1004-realtimeUpgrade linux-image-6.14.0-1007-raspiUpgrade linux-image-oem-20.04bUpgrade linux-image-azure-nvidia-6.8Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-fipsUpgrade linux-image-azure-lts-24.04Upgrade linux-image-5.15.0-1088-awsUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-lowlatency-5.15Upgrade linux-image-nvidia-tegra-rtUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-gcp-fips-5.15Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-5.15.0-1041-nvidia-tegraUpgrade linux-image-6.14.0-22-generic-64kUpgrade linux-image-6.8.0-1040-aws-64kUpgrade linux-image-6.8.0-1041-gcp-64kUpgrade linux-image-5.15.0-144-lowlatency-64kUpgrade linux-image-raspi-nolpaeUpgrade linux-image-5.15.0-1030-nvidia-tegra-igxUpgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-5.15.0-1041-nvidia-tegra-rtUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-5.15.0-1094-azure-fipsUpgrade linux-image-nvidiaUpgrade linux-image-gkeUpgrade linux-image-6.14.0-1007-oracle-64kUpgrade linux-image-azure-lts-22.04Upgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-gke-5.15Upgrade linux-image-gke-64kUpgrade linux-image-lowlatency-6.8Upgrade linux-image-nvidia-6.8Upgrade linux-image-gkeop-6.8Upgrade linux-image-6.8.0-2031-raspi-realtimeUpgrade linux-image-5.15.0-1094-azureUpgrade linux-image-6.8.0-1037-gke-64kUpgrade linux-image-oracleUpgrade linux-image-gkeopUpgrade linux-image-6.8.0-1040-azureUpgrade linux-image-oem-22.04Upgrade linux-image-ibmUpgrade linux-image-aws-fipsUpgrade linux-image-6.14.0-1008-gcpUpgrade linux-image-generic-lpae-5.15Upgrade linux-image-5.15.0-144-lowlatencyUpgrade linux-image-gcp-6.8Upgrade linux-image-5.15.0-1085-gkeUpgrade linux-image-azure-nvidiaUpgrade linux-image-aws-fips-5.15Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-5.15.0-1082-nvidiaUpgrade linux-image-intel-iotg-5.15Upgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-oracle-64k-6.8Upgrade linux-image-ibm-5.15Upgrade linux-image-raspi-realtime-6.8Upgrade linux-image-oem-20.04Upgrade linux-image-5.15.0-1052-xilinx-zynqmpUpgrade linux-image-5.15.0-144-fipsUpgrade linux-image-5.15.0-1081-intel-iot-realtimeUpgrade linux-image-aws-64k-5.15Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.15.0-1088-aws-64kUpgrade linux-image-6.14.0-1008-gcp-64kUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-virtualUpgrade linux-image-azure-fips-5.15Upgrade linux-image-lowlatency-64kUpgrade linux-image-6.8.0-1040-nvidiaUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-azure-fipsUpgrade linux-image-gcpUpgrade linux-image-awsUpgrade linux-image-6.8.0-85-genericUpgrade linux-image-fips-5.15Upgrade linux-image-6.14.0-1007-azure-fdeUpgrade linux-image-5.15.0-1088-realtimeUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-5.15.0-1087-gcpUpgrade linux-image-oracle-5.15Upgrade linux-image-kvmUpgrade linux-image-gkeop-5.15Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-6.14.0-1007-aws-64kUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-azure-fde-6.8Upgrade linux-image-nvidia-tegra-igxUpgrade linux-image-6.14.0-1007-awsUpgrade linux-image-aws-5.15Upgrade linux-image-6.8.0-1040-nvidia-lowlatencyUpgrade linux-image-6.14.0-1007-oracleUpgrade linux-image-6.8.0-1038-ibmUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-raspiUpgrade linux-image-aws-64k-6.8Upgrade linux-image-intel-iotgUpgrade linux-image-6.8.0-1040-awsUpgrade linux-image-oem-22.04dUpgrade linux-image-6.8.0-85-lowlatencyUpgrade linux-image-realtime-6.8.1Upgrade linux-image-oem-22.04cUpgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-intel-iot-realtimeUpgrade linux-image-intelUpgrade linux-image-6.8.0-1041-gcpUpgrade linux-image-6.8.0-1040-raspiUpgrade linux-image-6.8.0-1040-nvidia-64kUpgrade linux-image-5.15.0-144-generic-64kUpgrade linux-image-5.15.0-1085-oracleUpgrade linux-image-6.8.0-1025-azure-nvidiaUpgrade linux-image-6.8.0-1037-oracle-64kUpgrade linux-image-realtimeUpgrade linux-image-oem-20.04cUpgrade linux-image-aws-lts-24.04Upgrade linux-image-generic-6.8Upgrade linux-image-azure-6.8Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.15.0-1070-gkeopUpgrade linux-image-azure-5.15Upgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-generic-64k-6.8Upgrade linux-image-gcp-fipsUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-gke-6.8Upgrade linux-image-5.15.0-1080-ibmUpgrade linux-image-5.15.0-1083-intel-iotgUpgrade linux-image-nvidia-64kUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-oem-22.04bUpgrade linux-image-ibm-6.8Upgrade linux-image-gke-64k-6.8Upgrade linux-image-6.8.1-1035-realtimeUpgrade linux-image-oracle-64kUpgrade linux-image-aws-6.8Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-virtual-5.15Upgrade linux-image-gcp-64kUpgrade linux-image-azure-nvidia-lts-24.04Upgrade linux-image-6.8.0-85-generic-64kUpgrade linux-image-6.8.0-1037-oracleUpgrade linux-image-6.8.0-1037-gkeUpgrade linux-image-5.15.0-1084-kvmUpgrade linux-image-virtual-6.8Upgrade linux-image-raspi-5.15Upgrade linux-image-oem-20.04dUpgrade linux-image-oracle-6.8Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-generic-64kUpgrade linux-image-azure-cvmUpgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-6.8.0-1040-azure-fdeUpgrade linux-image-aws-64kUpgrade linux-image-azureUpgrade linux-image-realtime-5.15Upgrade linux-image-raspi-6.8Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-nvidia-5.15Upgrade linux-image-6.8.0-1024-gkeopUpgrade linux-image-6.14.0-22-genericUpgrade linux-image-6.14.0-1007-azureUpgrade linux-image-5.15.0-144-generic-lpaeUpgrade linux-image-5.15.0-144-genericUpgrade linux-image-5.15.0-1087-gcp-fipsUpgrade linux-image-raspi-realtime | Jun 26, 2025 | May 1, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 13, 2025 | May 1, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub