In the Linux kernel, the following vulnerability has been resolved:
nvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length
If the host sends an H2CData command with an invalid DATAL, the kernel may crash in nvmet_tcp_build_pdu_iovec().
Unable to handle kernel NULL pointer dereference at virtual address 0000000000000000 lr : nvmet_tcp_io_work+0x6ac/0x718 [nvmet_tcp] Call trace: process_one_work+0x174/0x3c8 worker_thread+0x2d0/0x3e8 kthread+0x104/0x110
Fix the bug by raising a fatal error if DATAL isn't coherent with the packet size. Also, the PDU length should never exceed the MAXH2CDATA parameter which has been communicated to the host in nvmet_tcp_handle_icreq().
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jun 27, 2024 | Feb 23, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernelUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel-tools | May 13, 2024 | Feb 23, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-tools-libsUpgrade bpftoolUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade kernel-toolsUpgrade python3-perf | Jun 3, 2024 | Feb 23, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-tools-libsUpgrade kernelUpgrade python3-perfUpgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade bpftool | Jul 1, 2024 | Feb 23, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-toolsUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel | Jul 17, 2024 | Feb 23, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Feb 23, 2024 |
| Suse | — | Upgrade reiserfs-kmp-defaultUpgrade kernel-symsUpgrade kernel-rt-develUpgrade gfs2-kmp-64kbUpgrade dtb-alteraUpgrade kernel-sourceUpgrade kernel-default-base-rebuildUpgrade kernel-kvmsmall-develUpgrade dtb-xilinxUpgrade dtb-lgUpgrade kernel-rt_debug-develUpgrade kernel-devel-rtUpgrade ocfs2-kmp-defaultUpgrade cluster-md-kmp-64kbUpgrade kernel-debugUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-64kb-extraUpgrade kernel-source-vanillaUpgrade kselftests-kmp-64kbUpgrade cluster-md-kmp-azureUpgrade ocfs2-kmp-azureUpgrade dtb-rockchipUpgrade kernel-source-azureUpgrade kernel-develUpgrade gfs2-kmp-azureUpgrade gfs2-kmp-defaultUpgrade dtb-sprdUpgrade dtb-caviumUpgrade dlm-kmp-64kbUpgrade dtb-allwinnerUpgrade kernel-rtUpgrade reiserfs-kmp-azureUpgrade dtb-hisiliconUpgrade dtb-exynosUpgrade kernel-64kb-develUpgrade dtb-qcomUpgrade kernel-default-optionalUpgrade kernel-syms-azureUpgrade kernel-azure-optionalUpgrade kernel-devel-azureUpgrade kernel-rt-livepatchUpgrade kernel-64kb-livepatch-develUpgrade dtb-mediatekUpgrade dtb-armUpgrade kernel-default-vdsoUpgrade kernel-azureUpgrade cluster-md-kmp-rtUpgrade kernel-preempt-develUpgrade kernel-preemptUpgrade kernel-docs-htmlUpgrade kernel-azure-baseUpgrade kernel-docsUpgrade dtb-nvidiaUpgrade kernel-default-livepatch-develUpgrade dtb-marvellUpgrade kselftests-kmp-azureUpgrade kernel-default-develUpgrade kernel-debug-vdsoUpgrade kernel-rt-optionalUpgrade kernel-azure-livepatch-develUpgrade kernel-azure-develUpgrade kernel-debug-livepatch-develUpgrade dtb-broadcomUpgrade kernel-kvmsmall-vdsoUpgrade kernel-syms-rtUpgrade kernel-rt-vdsoUpgrade kernel-default-manUpgrade kernel-source-rtUpgrade kernel-default-baseUpgrade dtb-apmUpgrade kernel-defaultUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-azure-extraUpgrade dtb-amlogicUpgrade kernel-64kb-optionalUpgrade dlm-kmp-rtUpgrade dtb-socionextUpgrade kselftests-kmp-rtUpgrade kernel-zfcpdumpUpgrade ocfs2-kmp-rtUpgrade kselftests-kmp-defaultUpgrade kernel-obs-qaUpgrade dtb-amdUpgrade kernel-rt_debugUpgrade reiserfs-kmp-64kbUpgrade kernel-rt-livepatch-develUpgrade kernel-kvmsmallUpgrade cluster-md-kmp-defaultUpgrade kernel-rt_debug-vdsoUpgrade kernel-debug-develUpgrade dtb-renesasUpgrade kernel-64kbUpgrade dtb-freescaleUpgrade kernel-macrosUpgrade kernel-default-livepatchUpgrade kernel-default-extraUpgrade kernel-azure-vdsoUpgrade dtb-appleUpgrade kernel-obs-buildUpgrade dlm-kmp-defaultUpgrade dlm-kmp-azureUpgrade kernel-rt-extraUpgrade gfs2-kmp-rtUpgrade dtb-amazonUpgrade reiserfs-kmp-rtUpgrade ocfs2-kmp-64kb | Apr 17, 2024 | Feb 23, 2024 |
| Ubuntu | — | Upgrade linux-image-6.5.0-1017-laptopUpgrade linux-image-6.5.0-1021-nvidia-64kUpgrade linux-image-5.4.0-175-lowlatencyUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-5.4.0-176-generic-lpaeUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.4.0-1110-kvmUpgrade linux-image-6.5.0-41-lowlatencyUpgrade linux-image-6.5.0-1021-awsUpgrade linux-image-5.15.0-1055-oracleUpgrade linux-image-5.4.0-175-genericUpgrade linux-image-gke-5.15Upgrade linux-image-5.4.0-1126-gcpUpgrade linux-image-6.5.0-1015-starfiveUpgrade linux-image-oem-22.04cUpgrade linux-image-5.15.0-1048-nvidia-lowlatencyUpgrade linux-image-5.15.0-1052-intel-iotgUpgrade linux-image-lowlatencyUpgrade linux-image-lowlatency-64kUpgrade linux-image-6.5.0-1024-oracle-64kUpgrade linux-image-aws-lts-20.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-gkeopUpgrade linux-image-5.15.0-102-lowlatency-64kUpgrade linux-image-azure-lts-20.04Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-oem-20.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-6.1.0-1035-oemUpgrade linux-image-virtualUpgrade linux-image-6.5.0-41-generic-64kUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-5.15.0-1057-awsUpgrade linux-image-gkeop-5.4Upgrade linux-image-nvidiaUpgrade linux-image-bluefieldUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-5.15.0-1050-ibmUpgrade linux-image-6.5.0-1024-oracleUpgrade linux-image-6.5.0-1022-azure-fdeUpgrade linux-image-5.15.0-1048-nvidiaUpgrade linux-image-oemUpgrade linux-image-generic-lpaeUpgrade linux-image-5.15.0-1055-gcpUpgrade linux-image-5.4.0-1106-raspiUpgrade linux-image-5.4.0-1034-iotUpgrade linux-image-raspi-nolpaeUpgrade linux-image-azure-lts-22.04Upgrade linux-image-gcp-lts-20.04Upgrade linux-image-genericUpgrade linux-image-5.4.0-1121-oracleUpgrade linux-image-6.5.0-1021-nvidiaUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-intelUpgrade linux-image-oem-22.04Upgrade linux-image-5.4.0-1041-xilinx-zynqmpUpgrade linux-image-gkeUpgrade linux-image-oem-20.04bUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-5.15.0-1040-gkeopUpgrade linux-image-5.4.0-1069-ibmUpgrade linux-image-intel-iotgUpgrade linux-image-ibmUpgrade linux-image-6.5.0-41-lowlatency-64kUpgrade linux-image-5.15.0-1050-raspiUpgrade linux-image-oem-22.04aUpgrade linux-image-generic-64kUpgrade linux-image-5.4.0-1082-bluefieldUpgrade linux-image-laptop-23.10Upgrade linux-image-oem-20.04cUpgrade linux-image-6.5.0-1022-azureUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-raspi-hwe-18.04Upgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-6.5.0-1022-gcpUpgrade linux-image-azure-fdeUpgrade linux-image-5.4.0-1127-azureUpgrade linux-image-5.15.0-102-genericUpgrade linux-image-nvidia-6.5Upgrade linux-image-azure-cvmUpgrade linux-image-starfiveUpgrade linux-image-oem-22.04dUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-raspiUpgrade linux-image-5.15.0-1054-gkeUpgrade linux-image-oem-20.04dUpgrade linux-image-nvidia-64k-6.5Upgrade linux-image-5.4.0-176-lowlatencyUpgrade linux-image-gkeop-5.15Upgrade linux-image-5.15.0-1060-azure-fdeUpgrade linux-image-raspi2Upgrade linux-image-oem-22.04bUpgrade linux-image-oem-osp1Upgrade linux-image-5.4.0-1089-gkeopUpgrade linux-image-5.4.0-1122-awsUpgrade linux-image-6.5.0-1018-raspiUpgrade linux-image-6.5.0-41-genericUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-5.15.0-102-lowlatencyUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-kvmUpgrade linux-image-oracleUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-gcpUpgrade linux-image-5.4.0-176-genericUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-oracle-64kUpgrade linux-image-5.15.0-1054-kvmUpgrade linux-image-5.15.0-102-generic-64kUpgrade linux-image-5.15.0-1060-azureUpgrade linux-image-6.5.0-1024-oemUpgrade linux-image-azureUpgrade linux-image-aws-lts-22.04Upgrade linux-image-awsUpgrade linux-image-5.15.0-102-generic-lpae | Mar 12, 2024 | Feb 23, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Feb 23, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub