In the Linux kernel, the following vulnerability has been resolved:
tls: stop recv() if initial process_rx_list gave us non-DATA
If we have a non-DATA record on the rx_list and another record of the same type still on the queue, we will end up merging them: - process_rx_list copies the non-DATA record - we start the loop and process the first available record since it's of the same type - we break out of the loop since the record was not DATA
Just check the record type and jump to the end in case process_rx_list did some work.
CVSS Details
- CVSS 3.1 Base Score: 8.2
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade perfUpgrade kernel-tools-debuginfoUpgrade kernel-livepatch-5.10.213-201.855Upgrade kernel-livepatch-5.15.152-100.162Upgrade kernel-debuginfoUpgrade python-perf-debuginfoUpgrade kernelUpgrade kernel-tools-develUpgrade kernel-headersUpgrade kernel-develUpgrade perf-debuginfoUpgrade python-perfUpgrade bpftool-debuginfoUpgrade bpftoolUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64 | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade kernel-debuginfoUpgrade kernel-libbpfUpgrade python3-perfUpgrade kernel-tools-debuginfoUpgrade kernel-tools-develUpgrade kernel-modules-extraUpgrade kernel-debuginfo-common-aarch64Upgrade bpftoolUpgrade python3-perf-debuginfoUpgrade kernel-develUpgrade perf-debuginfoUpgrade perfUpgrade kernel-libbpf-staticUpgrade kernel-libbpf-develUpgrade kernelUpgrade kernel-headersUpgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-livepatch-6.1.82-99.168Upgrade kernel-toolsUpgrade kernel-modules-extra-common | Oct 16, 2025 | Aug 22, 2025 |
| Debian | — | Upgrade linux | Aug 25, 2025 | Aug 25, 2025 |
| Dell Powerstore Dsa2026115 | — | Upgrade Dell PowerStoreOS to the latest version | Feb 25, 2026 | Feb 24, 2026 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernelUpgrade python3-perf | Nov 12, 2025 | Nov 6, 2025 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade kernelUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade bpftool | Dec 12, 2025 | Nov 6, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade python3-perfUpgrade kernelUpgrade kernel-abi-stablelistsUpgrade bpftoolUpgrade kernel-tools-libsUpgrade kernel-tools | Dec 12, 2025 | Nov 6, 2025 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernelNo solution exists | Nov 14, 2025 | Aug 22, 2025 |
| Ubuntu | — | Upgrade linux-gcpUpgrade linux-ibm-5.4Upgrade linux-gkeUpgrade linux-bluefieldUpgrade linuxUpgrade linux-oracle-5.4Upgrade linux-aws-5.4Upgrade linux-lowlatency-hwe-5.15Upgrade linux-aws-5.15Upgrade linux-awsUpgrade linux-nvidia-tegra-5.15Upgrade linux-ibm-5.15Upgrade linux-raspiUpgrade linux-raspi-5.4Upgrade linux-kvmUpgrade linux-nvidiaUpgrade linux-raspi-realtimeUpgrade linux-riscv-5.15Upgrade linux-gcp-5.4Upgrade linux-azure-5.4Upgrade linux-intel-iot-realtimeUpgrade linux-nvidia-tegra-igxUpgrade linux-ibmUpgrade linux-gcp-fipsUpgrade linux-azureUpgrade linux-gcp-5.15Upgrade linux-hwe-5.4Upgrade linux-nvidia-tegraUpgrade linux-gkeopUpgrade linux-intel-iotg-5.15Upgrade linux-azure-5.15Upgrade linux-xilinx-zynqmpUpgrade linux-fipsUpgrade linux-lowlatencyUpgrade linux-iotUpgrade linux-aws-fipsUpgrade linux-azure-fipsUpgrade linux-oracle-5.15Upgrade linux-hwe-5.15Upgrade linux-oracleUpgrade linux-realtimeUpgrade linux-intel-iotg | Aug 25, 2025 | Aug 22, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 10, 2025 | Aug 22, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub