In the Linux kernel, the following vulnerability has been resolved:
nvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length
If the host sends an H2CData command with an invalid DATAL, the kernel may crash in nvmet_tcp_build_pdu_iovec().
Unable to handle kernel NULL pointer dereference at virtual address 0000000000000000 lr : nvmet_tcp_io_work+0x6ac/0x718 [nvmet_tcp] Call trace: process_one_work+0x174/0x3c8 worker_thread+0x2d0/0x3e8 kthread+0x104/0x110
Fix the bug by raising a fatal error if DATAL isn't coherent with the packet size. Also, the PDU length should never exceed the MAXH2CDATA parameter which has been communicated to the host in nvmet_tcp_handle_icreq().
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jun 27, 2024 | Feb 23, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-toolsUpgrade kernelUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade python3-perf | May 13, 2024 | Feb 23, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade bpftoolUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade kernel-tools | Jun 3, 2024 | Feb 23, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade bpftoolUpgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel | Jul 1, 2024 | Feb 23, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernelUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade python3-perf | Jul 17, 2024 | Feb 23, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Feb 23, 2024 |
| Suse | — | Upgrade kernel-sourceUpgrade kernel-preemptUpgrade dlm-kmp-64kbUpgrade kernel-azureUpgrade dtb-alteraUpgrade kernel-default-optionalUpgrade kernel-kvmsmall-develUpgrade cluster-md-kmp-rtUpgrade dtb-xilinxUpgrade gfs2-kmp-64kbUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-preempt-develUpgrade kernel-rt-develUpgrade kselftests-kmp-64kbUpgrade dtb-allwinnerUpgrade dtb-exynosUpgrade kernel-syms-azureUpgrade dtb-caviumUpgrade dtb-lgUpgrade kernel-rt_debug-develUpgrade kernel-devel-azureUpgrade kernel-rt-livepatchUpgrade dtb-mediatekUpgrade dtb-hisiliconUpgrade dtb-armUpgrade kernel-64kb-livepatch-develUpgrade reiserfs-kmp-azureUpgrade kernel-develUpgrade ocfs2-kmp-azureUpgrade kernel-azure-optionalUpgrade reiserfs-kmp-defaultUpgrade dtb-sprdUpgrade kernel-source-azureUpgrade gfs2-kmp-defaultUpgrade kernel-default-vdsoUpgrade kernel-symsUpgrade dtb-rockchipUpgrade gfs2-kmp-azureUpgrade dtb-qcomUpgrade kernel-64kb-extraUpgrade kernel-debugUpgrade cluster-md-kmp-azureUpgrade kernel-default-base-rebuildUpgrade kernel-source-vanillaUpgrade kernel-rtUpgrade ocfs2-kmp-defaultUpgrade cluster-md-kmp-64kbUpgrade kernel-devel-rtUpgrade kernel-64kb-develUpgrade dtb-socionextUpgrade dtb-apmUpgrade kernel-rt-optionalUpgrade kernel-default-develUpgrade dlm-kmp-defaultUpgrade kernel-source-rtUpgrade kernel-rt-vdsoUpgrade kernel-docsUpgrade dtb-freescaleUpgrade dtb-renesasUpgrade kernel-debug-develUpgrade kselftests-kmp-azureUpgrade kernel-zfcpdumpUpgrade kernel-rt_debug-vdsoUpgrade reiserfs-kmp-64kbUpgrade kernel-rt_debugUpgrade kernel-rt-livepatch-develUpgrade kernel-kvmsmallUpgrade cluster-md-kmp-defaultUpgrade kernel-macrosUpgrade kernel-debug-vdsoUpgrade kernel-azure-livepatch-develUpgrade kernel-azure-develUpgrade dtb-amdUpgrade kernel-azure-vdsoUpgrade dtb-appleUpgrade ocfs2-kmp-rtUpgrade kernel-obs-buildUpgrade kernel-default-livepatchUpgrade kernel-debug-livepatch-develUpgrade kernel-default-extraUpgrade kernel-syms-rtUpgrade gfs2-kmp-rtUpgrade kernel-64kbUpgrade ocfs2-kmp-64kbUpgrade kernel-azure-baseUpgrade kernel-default-livepatch-develUpgrade kernel-docs-htmlUpgrade kernel-rt-extraUpgrade dlm-kmp-azureUpgrade kselftests-kmp-defaultUpgrade kernel-defaultUpgrade kernel-azure-extraUpgrade kernel-64kb-optionalUpgrade dtb-amlogicUpgrade dlm-kmp-rtUpgrade kernel-kvmsmall-livepatch-develUpgrade reiserfs-kmp-rtUpgrade kernel-obs-qaUpgrade dtb-marvellUpgrade kselftests-kmp-rtUpgrade kernel-default-baseUpgrade dtb-nvidiaUpgrade kernel-default-manUpgrade kernel-kvmsmall-vdsoUpgrade dtb-broadcomUpgrade dtb-amazon | Apr 17, 2024 | Feb 23, 2024 |
| Ubuntu | — | Upgrade linux-image-genericUpgrade linux-image-5.4.0-175-genericUpgrade linux-image-5.4.0-176-generic-lpaeUpgrade linux-image-gkeop-5.4Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-gke-5.15Upgrade linux-image-oem-20.04Upgrade linux-image-virtualUpgrade linux-image-oem-20.04bUpgrade linux-image-nvidiaUpgrade linux-image-5.15.0-1057-awsUpgrade linux-image-6.5.0-1024-oracleUpgrade linux-image-5.15.0-1050-ibmUpgrade linux-image-6.5.0-1024-oracle-64kUpgrade linux-image-5.15.0-1048-nvidiaUpgrade linux-image-gkeUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-6.5.0-1015-starfiveUpgrade linux-image-5.15.0-1048-nvidia-lowlatencyUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-ibm-lts-20.04Upgrade linux-image-bluefieldUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-5.15.0-1050-raspiUpgrade linux-image-6.5.0-1017-laptopUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-azure-lts-20.04Upgrade linux-image-gkeopUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-lowlatencyUpgrade linux-image-5.4.0-1110-kvmUpgrade linux-image-oem-22.04cUpgrade linux-image-5.4.0-175-lowlatencyUpgrade linux-image-raspi-nolpaeUpgrade linux-image-5.4.0-1041-xilinx-zynqmpUpgrade linux-image-6.5.0-1021-nvidia-64kUpgrade linux-image-5.15.0-102-lowlatency-64kUpgrade linux-image-6.5.0-41-lowlatencyUpgrade linux-image-aws-lts-20.04Upgrade linux-image-generic-64kUpgrade linux-image-5.4.0-1069-ibmUpgrade linux-image-5.4.0-1126-gcpUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-intel-iotgUpgrade linux-image-6.5.0-41-lowlatency-64kUpgrade linux-image-ibmUpgrade linux-image-5.15.0-1040-gkeopUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-oem-22.04Upgrade linux-image-5.4.0-1121-oracleUpgrade linux-image-intelUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-6.1.0-1035-oemUpgrade linux-image-6.5.0-1021-nvidiaUpgrade linux-image-generic-lpaeUpgrade linux-image-5.15.0-1052-intel-iotgUpgrade linux-image-6.5.0-1022-azure-fdeUpgrade linux-image-6.5.0-41-generic-64kUpgrade linux-image-5.15.0-1055-gcpUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-azure-lts-22.04Upgrade linux-image-5.4.0-1106-raspiUpgrade linux-image-6.5.0-1022-gcpUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-oem-osp1Upgrade linux-image-oem-20.04dUpgrade linux-image-nvidia-64k-6.5Upgrade linux-image-raspiUpgrade linux-image-5.15.0-1054-gkeUpgrade linux-image-6.5.0-1024-oemUpgrade linux-image-6.5.0-41-genericUpgrade linux-image-laptop-23.10Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-gcpUpgrade linux-image-awsUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-oracleUpgrade linux-image-aws-lts-22.04Upgrade linux-image-5.4.0-1082-bluefieldUpgrade linux-image-6.5.0-1018-raspiUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-5.15.0-102-generic-64kUpgrade linux-image-6.5.0-1022-azureUpgrade linux-image-kvmUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-oem-20.04cUpgrade linux-image-5.4.0-176-genericUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-oem-22.04dUpgrade linux-image-5.15.0-102-lowlatencyUpgrade linux-image-oracle-64kUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-gkeop-5.15Upgrade linux-image-5.15.0-102-generic-lpaeUpgrade linux-image-azureUpgrade linux-image-5.15.0-1060-azure-fdeUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-raspi2Upgrade linux-image-5.4.0-1089-gkeopUpgrade linux-image-5.15.0-1054-kvmUpgrade linux-image-starfiveUpgrade linux-image-oem-22.04bUpgrade linux-image-nvidia-6.5Upgrade linux-image-azure-cvmUpgrade linux-image-azure-fdeUpgrade linux-image-5.4.0-1122-awsUpgrade linux-image-5.15.0-102-genericUpgrade linux-image-5.15.0-1060-azureUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-5.4.0-176-lowlatencyUpgrade linux-image-5.4.0-1127-azureUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-5.15.0-1055-oracleUpgrade linux-image-lowlatency-64kUpgrade linux-image-oemUpgrade linux-image-6.5.0-1021-awsUpgrade linux-image-oem-22.04aUpgrade linux-image-5.4.0-1034-iot | Mar 12, 2024 | Feb 23, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Feb 23, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub