In the Linux kernel, the following vulnerability has been resolved:
tls: fix missing memory barrier in tls_init
In tls_init(), a write memory barrier is missing, and store-store reordering may cause NULL dereference in tls_{setsockopt,getsockopt}.
CPU0 CPU1 ----- ----- // In tls_init() // In tls_ctx_create() ctx = kzalloc() ctx->sk_proto = READ_ONCE(sk->sk_prot) -(1)
// In update_sk_prot() WRITE_ONCE(sk->sk_prot, tls_prots) -(2)
// In sock_common_setsockopt() READ_ONCE(sk->sk_prot)->setsockopt()
// In tls_{setsockopt,getsockopt}() ctx->sk_proto->setsockopt() -(3)
In the above scenario, when (1) and (2) are reordered, (3) can observe the NULL value of ctx->sk_proto, causing NULL dereference.
To fix it, we rely on rcu_assign_pointer() which implies the release barrier semantic. By moving rcu_assign_pointer() after ctx->sk_proto is initialized, we can ensure that ctx->sk_proto are visible when changing sk->sk_prot.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-zfcpdump-modulesUpgrade libperfUpgrade rtlaUpgrade kernel-64k-debug-modules-extraUpgrade kernel-modules-coreUpgrade kernel-64k-develUpgrade perfUpgrade kernel-rt-modules-coreUpgrade kernel-rt-coreUpgrade kernel-zfcpdump-develUpgrade kernel-coreUpgrade kernel-rt-debug-modulesUpgrade kernel-debug-develUpgrade kernel-modulesUpgrade kernel-64k-modules-extraUpgrade kernel-rt-debug-kvmUpgrade kernel-headersUpgrade kernel-debug-modules-extraUpgrade kernel-debug-uki-virtUpgrade kernel-debugUpgrade kernel-devel-matchedUpgrade kernel-debug-devel-matchedUpgrade kernel-rt-debug-develUpgrade kernel-rt-debug-modules-coreUpgrade kernel-64k-modules-coreUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-debug-coreUpgrade kernel-zfcpdumpUpgrade kernel-64k-debug-modules-coreUpgrade kernel-modules-extraUpgrade kernel-docUpgrade kernel-abi-stablelistsUpgrade kernel-rt-debug-modules-extraUpgrade kernel-uki-virtUpgrade kernel-rt-modulesUpgrade kernel-zfcpdump-coreUpgrade kernel-64k-debug-develUpgrade kernel-tools-libsUpgrade kernel-rt-modules-extraUpgrade kernel-64k-modulesUpgrade kernel-toolsUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-debug-modulesUpgrade kernel-rtUpgrade kernel-rt-debug-coreUpgrade kernel-64k-coreUpgrade kernel-rt-develUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-64kUpgrade kernel-zfcpdump-devel-matchedUpgrade python3-perfUpgrade kernel-cross-headersUpgrade kernel-64k-devel-matchedUpgrade kernel-tools-libs-develUpgrade kernel-64k-debugUpgrade kernel-rt-kvmUpgrade kernelUpgrade kernel-64k-debug-modulesUpgrade bpftoolUpgrade kernel-64k-debug-coreUpgrade kernel-rt-debugUpgrade rvUpgrade kernel-debug-modules-coreUpgrade kernel-devel | Aug 12, 2024 | Jun 21, 2024 |
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfoUpgrade perf-debuginfoUpgrade kernelUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-debuginfoUpgrade kernel-headersUpgrade kernel-develUpgrade perfUpgrade kernel-tools-develUpgrade bpftoolUpgrade python-perfUpgrade bpftool-debuginfoUpgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-livepatch-5.10.219-208.866Upgrade python-perf-debuginfoUpgrade kernel-livepatch-5.15.161-106.159 | Aug 14, 2024 | Jun 21, 2024 |
| Amazon_linux_2023 | — | Upgrade kernel-libbpf-develUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-develUpgrade kernel-libbpf-staticUpgrade kernelUpgrade bpftoolUpgrade kernel-develUpgrade kernel-modules-extra-commonUpgrade kernel-toolsUpgrade kernel-livepatch-6.1.94-99.176Upgrade python3-perf-debuginfoUpgrade kernel-libbpfUpgrade perf-debuginfoUpgrade kernel-modules-extraUpgrade python3-perfUpgrade kernel-debuginfo-common-x86_64Upgrade perfUpgrade kernel-tools-debuginfoUpgrade kernel-headersUpgrade bpftool-debuginfoUpgrade kernel-debuginfo | Feb 17, 2025 | Jun 21, 2024 |
| Debian | — | Upgrade linux | Jul 17, 2024 | Jun 21, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernelUpgrade python3-perfUpgrade bpftoolUpgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libs | Oct 9, 2024 | Jun 21, 2024 |
| Oracle_linux | — | Upgrade kernel | Aug 16, 2024 | Jun 21, 2024 |
| Redhat_linux | — | Upgrade kernel-rtNo solution existsUpgrade kernel | Jul 25, 2024 | Jun 21, 2024 |
| Rocky_linux | — | Upgrade kernel-uki-virtUpgrade libperf-debuginfoUpgrade kernel-rt-debug-modules-extraUpgrade kernel-tools-libs-develUpgrade kernel-rt-debug-develUpgrade kernel-rt-debug-kvmUpgrade kernel-modules-coreUpgrade kernel-zfcpdump-coreUpgrade rvUpgrade kernel-toolsUpgrade perfUpgrade kernel-devel-matchedUpgrade python3-perfUpgrade kernel-headersUpgrade kernel-zfcpdump-develUpgrade kernel-rt-debug-modules-coreUpgrade kernel-zfcpdump-modulesUpgrade kernel-debug-devel-matchedUpgrade libperfUpgrade kernel-rtUpgrade kernel-zfcpdump-modules-coreUpgrade perf-debuginfoUpgrade kernel-rt-modulesUpgrade kernel-rt-modules-coreUpgrade kernel-zfcpdump-debuginfoUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-rt-debug-modulesUpgrade kernel-rt-develUpgrade bpftool-debuginfoUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-tools-libsUpgrade kernel-rt-kvmUpgrade kernel-debug-modules-coreUpgrade kernel-debug-coreUpgrade kernel-modules-extraUpgrade kernel-modulesUpgrade bpftoolUpgrade kernel-debug-uki-virtUpgrade kernel-debug-modulesUpgrade kernel-cross-headersUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfoUpgrade kernel-rt-debug-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade python3-perf-debuginfoUpgrade kernel-rt-modules-extraUpgrade kernel-debug-modules-extraUpgrade kernel-coreUpgrade kernel-rt-debuginfoUpgrade kernel-rt-debugUpgrade kernel-rt-debug-coreUpgrade rtlaUpgrade kernel-develUpgrade kernel-debug-debuginfoUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-zfcpdumpUpgrade kernel-debug-develUpgrade kernel-rt-coreUpgrade kernelUpgrade kernel-debug | Aug 22, 2024 | Jun 21, 2024 |
| Suse | — | Upgrade cluster-md-kmp-defaultUpgrade kselftests-kmp-defaultUpgrade kselftests-kmp-rtUpgrade dtb-nvidiaUpgrade kernel-defaultUpgrade kernel-macrosUpgrade kernel-rt-optionalUpgrade kernel-debugUpgrade dtb-sprdUpgrade kernel-debug-livepatch-develUpgrade kernel-default-baseUpgrade reiserfs-kmp-64kbUpgrade kernel-rt_debug-vdsoUpgrade reiserfs-kmp-rtUpgrade cluster-md-kmp-64kbUpgrade kernel-rt-vdsoUpgrade dtb-apmUpgrade kernel-rt-livepatch-develUpgrade reiserfs-kmp-defaultUpgrade kernel-64kb-optionalUpgrade kernel-default-livepatch-develUpgrade kernel-kvmsmall-vdsoUpgrade dlm-kmp-defaultUpgrade kernel-syms-rtUpgrade dtb-hisiliconUpgrade kernel-default-extraUpgrade dtb-marvellUpgrade kernel-rt_debugUpgrade kernel-debug-develUpgrade kernel-docs-htmlUpgrade kernel-obs-qaUpgrade kernel-64kb-extraUpgrade kernel-rt_debug-livepatch-develUpgrade dtb-broadcomUpgrade dtb-renesasUpgrade ocfs2-kmp-64kbUpgrade kernel-symsUpgrade kernel-docsUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-azure-vdsoUpgrade kernel-source-rtUpgrade dtb-appleUpgrade dtb-socionextUpgrade dtb-amlogicUpgrade dlm-kmp-azureUpgrade dlm-kmp-rtUpgrade dtb-armUpgrade dtb-amdUpgrade kernel-azure-extraUpgrade gfs2-kmp-rtUpgrade gfs2-kmp-defaultUpgrade kernel-64kb-livepatch-develUpgrade kernel-default-optionalUpgrade kernel-64kb-develUpgrade kselftests-kmp-azureUpgrade kernel-syms-azureUpgrade kernel-obs-buildUpgrade dtb-xilinxUpgrade kernel-zfcpdumpUpgrade dtb-rockchipUpgrade kernel-sourceUpgrade dtb-qcomUpgrade kernel-rt-livepatchUpgrade cluster-md-kmp-rtUpgrade dlm-kmp-64kbUpgrade kernel-default-base-rebuildUpgrade kernel-rtUpgrade kernel-develUpgrade kernel-default-develUpgrade dtb-alteraUpgrade kernel-devel-rtUpgrade reiserfs-kmp-azureUpgrade ocfs2-kmp-rtUpgrade kernel-default-livepatchUpgrade kernel-debug-vdsoUpgrade dtb-freescaleUpgrade dtb-allwinnerUpgrade kernel-azure-optionalUpgrade dtb-amazonUpgrade cluster-md-kmp-azureUpgrade kernel-kvmsmallUpgrade kernel-rt-extraUpgrade dtb-exynosUpgrade gfs2-kmp-azureUpgrade kernel-azure-develUpgrade kernel-source-azureUpgrade kernel-rt_debug-develUpgrade kernel-default-vdsoUpgrade kernel-64kbUpgrade ocfs2-kmp-defaultUpgrade kselftests-kmp-64kbUpgrade kernel-rt-develUpgrade ocfs2-kmp-azureUpgrade kernel-azureUpgrade kernel-source-vanillaUpgrade kernel-devel-azureUpgrade kernel-azure-livepatch-develUpgrade dtb-mediatekUpgrade dtb-lgUpgrade dtb-caviumUpgrade gfs2-kmp-64kbUpgrade kernel-kvmsmall-devel | Dec 5, 2025 | Sep 10, 2024 |
| Ubuntu | — | Upgrade linux-image-6.8.0-44-lowlatency-64kUpgrade linux-image-azureUpgrade linux-image-gcpUpgrade linux-image-oem-20.04cUpgrade linux-image-ibmUpgrade linux-image-5.15.0-121-lowlatencyUpgrade linux-image-5.15.0-121-generic-64kUpgrade linux-image-5.15.0-1072-azure-fdeUpgrade linux-image-genericUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-aws-lts-22.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-6.8.0-44-generic-64kUpgrade linux-image-nvidiaUpgrade linux-image-oem-22.04aUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.15.0-1052-gkeopUpgrade linux-image-oem-20.04bUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-raspiUpgrade linux-image-oem-22.04Upgrade linux-image-intelUpgrade linux-image-6.8.0-45-genericUpgrade linux-image-6.8.0-1012-oracle-64kUpgrade linux-image-6.8.0-1015-awsUpgrade linux-image-5.15.0-1062-ibmUpgrade linux-image-6.8.0-44-lowlatencyUpgrade linux-image-5.15.0-1064-nvidia-lowlatencyUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-6.8.0-45-generic-64kUpgrade linux-image-5.15.0-1069-awsUpgrade linux-image-generic-64kUpgrade linux-image-6.8.0-1012-oemUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-ibm-classicUpgrade linux-image-azure-lts-22.04Upgrade linux-image-6.8.0-1013-nvidiaUpgrade linux-image-5.15.0-121-genericUpgrade linux-image-6.8.0-44-genericUpgrade linux-image-5.15.0-1068-gcpUpgrade linux-image-5.15.0-1064-intel-iotgUpgrade linux-image-lowlatencyUpgrade linux-image-gkeopUpgrade linux-image-generic-lpaeUpgrade linux-image-5.15.0-121-generic-lpaeUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-6.8.0-1014-azureUpgrade linux-image-intel-iotgUpgrade linux-image-5.15.0-1066-kvmUpgrade linux-image-5.15.0-1072-azureUpgrade linux-image-azure-fdeUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-oem-22.04cUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-gke-5.15Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.15.0-1064-nvidiaUpgrade linux-image-oracle-64kUpgrade linux-image-nvidia-6.8Upgrade linux-image-gkeop-5.15Upgrade linux-image-5.15.0-121-lowlatency-64kUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-6.8.0-1014-gcpUpgrade linux-image-6.8.0-1011-raspiUpgrade linux-image-6.8.0-1012-ibmUpgrade linux-image-oem-20.04dUpgrade linux-image-6.8.0-1013-nvidia-lowlatencyUpgrade linux-image-azure-cvmUpgrade linux-image-nvidia-64kUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-5.15.0-1067-oracleUpgrade linux-image-5.15.0-1035-xilinx-zynqmpUpgrade linux-image-6.8.0-1013-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1010-gkeUpgrade linux-image-gkeUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-oracleUpgrade linux-image-6.8.0-1014-azure-fdeUpgrade linux-image-virtualUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-6.8.0-1013-nvidia-64kUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-awsUpgrade linux-image-oem-20.04Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-5.15.0-1066-gkeUpgrade linux-image-oem-22.04dUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-oem-22.04bUpgrade linux-image-6.8.0-1012-oracleUpgrade linux-image-raspi-nolpaeUpgrade linux-image-5.15.0-1062-raspiUpgrade linux-image-kvm | Sep 12, 2024 | Jun 21, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 14, 2025 | Jun 21, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub