In the Linux kernel, the following vulnerability has been resolved:
net/tls: fix kernel panic when alloc_page failed
We cannot set frag_list to NULL pointer when alloc_page failed. It will be used in tls_strp_check_queue_ok when the next time tls_strp_read_sock is called.
This is because we don't reset full_len in tls_strp_flush_anchor_copy() so the recv path will try to continue handling the partial record on the next call but we dettached the rcvq from the frag list. Alternative fix would be to reset full_len.
Unable to handle kernel NULL pointer dereference at virtual address 0000000000000028 Call trace: tls_strp_check_rcv+0x128/0x27c tls_strp_data_ready+0x34/0x44 tls_data_ready+0x3c/0x1f0 tcp_data_ready+0x9c/0xe4 tcp_data_queue+0xf6c/0x12d0 tcp_rcv_established+0x52c/0x798
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade python3-perf-debuginfoUpgrade python3-perf6.12Upgrade kernel6.12-debuginfo-common-x86_64Upgrade bpftoolUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-debuginfoUpgrade kernel-libbpfUpgrade bpftool-debuginfoUpgrade kernel6.12Upgrade kernel-libbpf-debuginfoUpgrade kernel-modules-extraUpgrade perf6.12Upgrade kernel-libbpf-develUpgrade kernelUpgrade kernel-livepatch-6.12.30-34.92Upgrade kernel-develUpgrade kernel-debuginfoUpgrade kernel-libbpf-staticUpgrade kernel-livepatch-6.1.140-154.222Upgrade perfUpgrade python3-perf6.12-debuginfoUpgrade kernel6.12-debuginfo-common-aarch64Upgrade perf6.12-debuginfoUpgrade perf-debuginfoUpgrade kernel6.12-debuginfoUpgrade kernel-headersUpgrade kernel-modules-extra-commonUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-toolsUpgrade python3-perfUpgrade kernel6.12-modules-extraUpgrade kernel-tools-devel | Jul 11, 2025 | Jun 18, 2025 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Jun 20, 2025 | Jun 18, 2025 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jun 18, 2025 |
| Suse | — | Upgrade kernel-rt_debug-vdsoUpgrade kernel-default-baseUpgrade kernel-rt-livepatch-develUpgrade kernel-obs-qaUpgrade kernel-default-livepatchUpgrade kernel-kvmsmallUpgrade kernel-docsUpgrade dtb-amazonUpgrade cluster-md-kmp-azureUpgrade dtb-appleUpgrade kernel-syms-rtUpgrade dtb-broadcomUpgrade dlm-kmp-azureUpgrade kernel-default-extraUpgrade dtb-amlogicUpgrade kernel-azure-develUpgrade kernel-rt-optionalUpgrade dtb-marvellUpgrade kselftests-kmp-defaultUpgrade gfs2-kmp-rtUpgrade kernel-obs-buildUpgrade kernel-rt-extraUpgrade ocfs2-kmp-64kbUpgrade kernel-source-rtUpgrade kernel-azure-extraUpgrade kselftests-kmp-rtUpgrade kernel-syms-azureUpgrade dtb-freescaleUpgrade reiserfs-kmp-rtUpgrade dtb-nvidiaUpgrade reiserfs-kmp-64kbUpgrade kernel-rtUpgrade kernel-rt-vdsoUpgrade dtb-apmUpgrade cluster-md-kmp-defaultUpgrade dlm-kmp-defaultUpgrade kernel-azure-vdsoUpgrade kernel-rt_debugUpgrade kernel-zfcpdumpUpgrade kernel-devel-azureUpgrade kernel-kvmsmall-vdsoUpgrade dtb-amdUpgrade gfs2-kmp-64kbUpgrade kernel-docs-htmlUpgrade kernel-kvmsmall-develUpgrade ocfs2-kmp-rtUpgrade dtb-socionextUpgrade kernel-defaultUpgrade kernel-macrosUpgrade dtb-xilinxUpgrade dlm-kmp-rtUpgrade gfs2-kmp-defaultUpgrade kernel-sourceUpgrade kernel-debug-vdsoUpgrade kernel-64kb-optionalUpgrade cluster-md-kmp-rtUpgrade reiserfs-kmp-azureUpgrade kselftests-kmp-64kbUpgrade kernel-develUpgrade kernel-64kb-develUpgrade kernel-64kb-extraUpgrade dtb-hisiliconUpgrade kernel-azureUpgrade dtb-caviumUpgrade kernel-64kbUpgrade ocfs2-kmp-azureUpgrade kernel-symsUpgrade kernel-azure-optionalUpgrade kernel-debugUpgrade dtb-allwinnerUpgrade kernel-source-azureUpgrade dtb-rockchipUpgrade dtb-mediatekUpgrade kernel-rt_debug-develUpgrade kernel-debug-develUpgrade dtb-qcomUpgrade kselftests-kmp-azureUpgrade kernel-default-optionalUpgrade kernel-source-vanillaUpgrade kernel-rt-develUpgrade kernel-default-vdsoUpgrade dtb-sprdUpgrade dtb-lgUpgrade dtb-alteraUpgrade dlm-kmp-64kbUpgrade dtb-exynosUpgrade dtb-armUpgrade ocfs2-kmp-defaultUpgrade reiserfs-kmp-defaultUpgrade cluster-md-kmp-64kbUpgrade kernel-devel-rtUpgrade kernel-default-livepatch-develUpgrade gfs2-kmp-azureUpgrade kernel-default-develUpgrade kernel-default-base-rebuildUpgrade dtb-renesas | Dec 5, 2025 | Jul 8, 2025 |
| Ubuntu | — | Upgrade linux-image-6.14.0-28-genericUpgrade linux-image-aws-lts-24.04Upgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-generic-6.14Upgrade linux-image-gkeUpgrade linux-image-nvidia-64kUpgrade linux-image-virtual-6.8Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-realtime-6.8.1Upgrade linux-image-gcp-64k-6.8Upgrade linux-image-aws-fipsUpgrade linux-image-realtime-6.14Upgrade linux-image-gke-64k-6.8Upgrade linux-image-6.14.0-1011-oracleUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-6.14.0-28-generic-64kUpgrade linux-image-awsUpgrade linux-image-gcp-64k-6.14Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-oracleUpgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-azure-6.14Upgrade linux-image-oracle-6.14Upgrade linux-image-nvidia-6.8Upgrade linux-image-gcp-6.14Upgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-oracle-6.8Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-virtual-6.14Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-intel-iot-realtimeUpgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-lowlatency-6.8Upgrade linux-image-realtimeUpgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-gcp-6.8Upgrade linux-image-generic-64k-6.14Upgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-aws-6.14Upgrade linux-image-6.14.0-1011-aws-64kUpgrade linux-image-intel-iotgUpgrade linux-image-oem-24.04Upgrade linux-image-aws-64kUpgrade linux-image-virtualUpgrade linux-image-azure-6.8Upgrade linux-image-6.14.0-1014-gcpUpgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-xilinx-6.8Upgrade linux-image-gke-6.8Upgrade linux-image-oem-24.04cUpgrade linux-image-raspi-6.8Upgrade linux-image-gcp-64kUpgrade linux-image-aws-fips-6.8Upgrade linux-image-6.14.0-1010-realtimeUpgrade linux-image-oem-22.04dUpgrade linux-image-kvmUpgrade linux-image-aws-64k-6.14Upgrade linux-image-aws-64k-6.8Upgrade linux-image-oem-24.04aUpgrade linux-image-6.8.0-1051-azureUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-raspi-realtimeUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-lowlatency-64kUpgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-raspi-6.14Upgrade linux-image-oem-22.04aUpgrade linux-image-oracle-64kUpgrade linux-image-ibmUpgrade linux-image-6.14.0-1014-gcp-64kUpgrade linux-image-6.14.0-1011-awsUpgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-oem-22.04cUpgrade linux-image-gcp-fipsUpgrade linux-image-nvidiaUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-azureUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-gcpUpgrade linux-image-gke-64kUpgrade linux-image-6.14.0-1010-azureUpgrade linux-image-generic-64kUpgrade linux-image-azure-lts-24.04Upgrade linux-image-azure-fipsUpgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-gcp-fips-6.8Upgrade linux-image-realtime-hwe-22.04Upgrade linux-image-raspiUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-lowlatencyUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-6.8.0-1046-awsUpgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-6.14.0-1010-oemUpgrade linux-image-6.8.0-100-fipsUpgrade linux-image-azure-fips-6.8Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-oem-6.14Upgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-oem-22.04bUpgrade linux-image-generic-6.8Upgrade linux-image-6.14.0-1011-oracle-64kUpgrade linux-image-generic-lpaeUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-genericUpgrade linux-image-gkeopUpgrade linux-image-6.8.0-1046-azureUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-oracle-64k-6.14Upgrade linux-image-fips-6.8Upgrade linux-image-ibm-classicUpgrade linux-image-6.14.0-1012-raspiUpgrade linux-image-ibm-6.8Upgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-gkeop-6.8Upgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-fipsUpgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-oem-22.04Upgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-generic-64k-6.8Upgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-6.8.0-100-genericUpgrade linux-image-aws-6.8Upgrade linux-image-xilinx | Jun 26, 2025 | Jun 18, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 8, 2025 | Jun 18, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub