In the Linux kernel, the following vulnerability has been resolved:
net: tls: explicitly disallow disconnect
syzbot discovered that it can disconnect a TLS socket and then run into all sort of unexpected corner cases. I have a vague recollection of Eric pointing this out to us a long time ago. Supporting disconnect is really hard, for one thing if offload is enabled we'd need to wait for all packets to be _acked_. Disconnect is not commonly used, disallow it.
The immediate problem syzbot run into is the warning in the strp, but that's just the easiest bug to trigger:
WARNING: CPU: 0 PID: 5834 at net/tls/tls_strp.c:486 tls_strp_msg_load+0x72e/0xa80 net/tls/tls_strp.c:486 RIP: 0010:tls_strp_msg_load+0x72e/0xa80 net/tls/tls_strp.c:486 Call Trace: <TASK> tls_rx_rec_wait+0x280/0xa60 net/tls/tls_sw.c:1363 tls_sw_recvmsg+0x85c/0x1c30 net/tls/tls_sw.c:2043 inet6_recvmsg+0x2c9/0x730 net/ipv6/af_inet6.c:678 sock_recvmsg_nosec net/socket.c:1023 [inline] sock_recvmsg+0x109/0x280 net/socket.c:1045 __sys_recvfrom+0x202/0x380 net/socket.c:2237
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade perfUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-develUpgrade perf-debuginfoUpgrade kernel-toolsUpgrade kernel-livepatch-5.10.237-230.949Upgrade kernel-develUpgrade kernel-tools-debuginfoUpgrade bpftoolUpgrade kernel-headersUpgrade kernel-livepatch-5.15.184-125.190Upgrade kernel-livepatch-5.15.182-123.190Upgrade python-perfUpgrade kernelUpgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade python-perf-debuginfoUpgrade kernel-debuginfo | Jun 24, 2025 | May 1, 2025 |
| Amazon_linux_2023 | — | Upgrade perf6.12Upgrade python3-perf-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade python3-perf6.12-debuginfoUpgrade kernel-libbpf-develUpgrade perfUpgrade bpftoolUpgrade kernel-toolsUpgrade kernel-libbpf-staticUpgrade kernel-modules-extra-commonUpgrade kernel-libbpf-debuginfoUpgrade kernelUpgrade kernel-modules-extraUpgrade kernel6.12Upgrade kernel-debuginfo-common-x86_64Upgrade kernel6.12-debuginfo-common-aarch64Upgrade kernel-livepatch-6.1.140-154.222Upgrade kernel-develUpgrade kernel6.12-debuginfo-common-x86_64Upgrade kernel-livepatch-6.12.25-32.101Upgrade bpftool-debuginfoUpgrade kernel6.12-debuginfoUpgrade kernel-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel6.12-modules-extraUpgrade perf-debuginfoUpgrade kernel-libbpfUpgrade python3-perf6.12Upgrade kernel-headersUpgrade perf6.12-debuginfoUpgrade kernel-tools-develUpgrade python3-perf | Jun 24, 2025 | May 1, 2025 |
| Debian | — | Upgrade linux-6.1Upgrade linux | May 5, 2025 | May 1, 2025 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade kernelUpgrade kernel-tools-libsUpgrade bpftoolUpgrade kernel-tools | Oct 14, 2025 | Oct 10, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade python3-perfUpgrade bpftoolUpgrade kernel | Nov 12, 2025 | Oct 10, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade bpftoolUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernelUpgrade kernel-toolsUpgrade kernel-abi-stablelists | Oct 24, 2025 | Oct 10, 2025 |
| Oracle_linux | — | Upgrade kernel-uek | Jul 17, 2025 | May 1, 2025 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 1, 2025 |
| Suse | — | Upgrade kernel-macrosUpgrade kernel-devel-azureUpgrade dtb-armUpgrade kernel-rt-livepatch-develUpgrade dtb-lgUpgrade kernel-rt-vdsoUpgrade reiserfs-kmp-azureUpgrade ocfs2-kmp-rtUpgrade reiserfs-kmp-64kbUpgrade kernel-kvmsmallUpgrade kernel-rt-optionalUpgrade dtb-alteraUpgrade dtb-qcomUpgrade kernel-syms-azureUpgrade kernel-kvmsmall-vdsoUpgrade kernel-zfcpdumpUpgrade kselftests-kmp-azureUpgrade kernel-rt_debug-vdsoUpgrade dtb-apmUpgrade kernel-default-extraUpgrade kernel-default-manUpgrade dtb-rockchipUpgrade dtb-exynosUpgrade kernel-rt-extraUpgrade kernel-rtUpgrade kernel-obs-qaUpgrade kernel-kvmsmall-develUpgrade cluster-md-kmp-azureUpgrade dlm-kmp-64kbUpgrade kernel-obs-buildUpgrade cluster-md-kmp-defaultUpgrade dtb-amlogicUpgrade kselftests-kmp-64kbUpgrade kernel-azure-develUpgrade kernel-default-base-rebuildUpgrade kernel-sourceUpgrade kernel-source-azureUpgrade kernel-azure-optionalUpgrade kernel-syms-rtUpgrade gfs2-kmp-rtUpgrade kernel-default-vdsoUpgrade kernel-source-rtUpgrade kernel-azure-vdsoUpgrade dtb-amdUpgrade kselftests-kmp-defaultUpgrade kernel-rt_debugUpgrade kernel-rt-develUpgrade dtb-amazonUpgrade kernel-default-baseUpgrade kernel-azureUpgrade kernel-64kb-extraUpgrade dtb-broadcomUpgrade dlm-kmp-defaultUpgrade ocfs2-kmp-64kbUpgrade dtb-renesasUpgrade dtb-allwinnerUpgrade kernel-develUpgrade kernel-default-optionalUpgrade kernel-default-livepatchUpgrade kernel-defaultUpgrade kernel-debug-vdsoUpgrade kernel-debug-develUpgrade kernel-default-develUpgrade dtb-mediatekUpgrade kernel-debugUpgrade gfs2-kmp-64kbUpgrade dtb-marvellUpgrade dlm-kmp-azureUpgrade kernel-64kbUpgrade dtb-nvidiaUpgrade dtb-xilinxUpgrade kernel-symsUpgrade kernel-docs-htmlUpgrade kernel-docsUpgrade kernel-rt_debug-develUpgrade reiserfs-kmp-rtUpgrade dtb-socionextUpgrade kernel-default-livepatch-develUpgrade dlm-kmp-rtUpgrade kernel-devel-rtUpgrade cluster-md-kmp-rtUpgrade ocfs2-kmp-azureUpgrade kselftests-kmp-rtUpgrade kernel-64kb-optionalUpgrade dtb-caviumUpgrade dtb-appleUpgrade gfs2-kmp-azureUpgrade dtb-hisiliconUpgrade cluster-md-kmp-64kbUpgrade kernel-source-vanillaUpgrade ocfs2-kmp-defaultUpgrade reiserfs-kmp-defaultUpgrade kernel-azure-extraUpgrade kernel-64kb-develUpgrade gfs2-kmp-defaultUpgrade dtb-sprdUpgrade dtb-freescale | Dec 5, 2025 | Jul 8, 2025 |
| Ubuntu | — | Upgrade linux-image-6.14.0-1007-aws-64kUpgrade linux-image-6.8.0-1038-ibmUpgrade linux-image-6.8.0-85-lowlatencyUpgrade linux-image-5.15.0-1085-oracleUpgrade linux-image-aws-lts-24.04Upgrade linux-image-6.8.0-1041-gcpUpgrade linux-image-6.8.0-1037-oracle-64kUpgrade linux-image-5.15.0-144-generic-64kUpgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-6.14.0-1007-awsUpgrade linux-image-intelUpgrade linux-image-aws-5.15Upgrade linux-image-6.8.0-1040-nvidiaUpgrade linux-image-6.8.0-1040-nvidia-lowlatencyUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-6.8.0-1040-awsUpgrade linux-image-6.8.0-1040-raspiUpgrade linux-image-6.8.0-1025-azure-nvidiaUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-nvidia-5.15Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-oem-20.04cUpgrade linux-image-oem-22.04cUpgrade linux-image-oem-22.04dUpgrade linux-image-intel-iotgUpgrade linux-image-5.15.0-1070-gkeopUpgrade linux-image-5.15.0-144-generic-lpaeUpgrade linux-image-5.15.0-1080-ibmUpgrade linux-image-gke-6.8Upgrade linux-image-generic-64k-6.8Upgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-gcp-64kUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-azure-5.15Upgrade linux-image-6.8.0-1040-nvidia-64kUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-gcp-fipsUpgrade linux-image-gke-64k-6.8Upgrade linux-image-ibm-6.8Upgrade linux-image-6.8.0-1037-oracleUpgrade linux-image-nvidia-64kUpgrade linux-image-gkeop-5.15Upgrade linux-image-oracle-5.15Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-oem-22.04bUpgrade linux-image-azureUpgrade linux-image-realtime-5.15Upgrade linux-image-6.14.0-1007-azureUpgrade linux-image-raspi-6.8Upgrade linux-image-raspi-realtimeUpgrade linux-image-6.8.0-1024-gkeopUpgrade linux-image-6.8.0-85-genericUpgrade linux-image-virtual-5.15Upgrade linux-image-nvidia-tegra-igxUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-realtimeUpgrade linux-image-azure-fde-6.8Upgrade linux-image-gcp-64k-6.8Upgrade linux-image-generic-6.8Upgrade linux-image-5.15.0-144-genericUpgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-azure-cvmUpgrade linux-image-oracle-6.8Upgrade linux-image-raspiUpgrade linux-image-oem-20.04dUpgrade linux-image-realtime-6.8.1Upgrade linux-image-5.15.0-1087-gcp-fipsUpgrade linux-image-5.15.0-1084-kvmUpgrade linux-image-6.8.0-1040-azure-fdeUpgrade linux-image-aws-64kUpgrade linux-image-virtual-6.8Upgrade linux-image-generic-64kUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-6.14.0-1007-oracleUpgrade linux-image-raspi-5.15Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-aws-6.8Upgrade linux-image-5.15.0-1083-intel-iotgUpgrade linux-image-oracle-64kUpgrade linux-image-6.14.0-22-genericUpgrade linux-image-5.15.0-1087-gcpUpgrade linux-image-aws-64k-6.8Upgrade linux-image-6.8.0-1037-gkeUpgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-fips-5.15Upgrade linux-image-azure-fipsUpgrade linux-image-gcpUpgrade linux-image-6.14.0-1007-azure-fdeUpgrade linux-image-kvmUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-5.15.0-1088-realtimeUpgrade linux-image-awsUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-6.8.0-85-generic-64kUpgrade linux-image-azure-6.8Upgrade linux-image-6.8.1-1035-realtimeUpgrade linux-image-azure-nvidia-lts-24.04Upgrade linux-image-lowlatencyUpgrade linux-image-aws-lts-22.04Upgrade linux-image-5.15.0-1082-nvidia-lowlatencyUpgrade linux-image-ibm-classicUpgrade linux-image-5.15.0-1088-aws-fipsUpgrade linux-image-5.15.0-1083-raspiUpgrade linux-image-azure-fdeUpgrade linux-image-6.8.0-1040-nvidia-lowlatency-64kUpgrade linux-image-lowlatency-5.15Upgrade linux-image-6.14.0-1008-gcpUpgrade linux-image-5.15.0-1085-gkeUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-5.15.0-1088-aws-64kUpgrade linux-image-5.15.0-1081-intel-iot-realtimeUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-azure-fips-5.15Upgrade linux-image-aws-fips-5.15Upgrade linux-image-aws-fipsUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-6.14.0-1008-gcp-64kUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-5.15.0-144-lowlatencyUpgrade linux-image-azure-nvidiaUpgrade linux-image-6.8.0-2031-raspi-realtimeUpgrade linux-image-6.8.0-1040-azureUpgrade linux-image-6.8.0-1037-gke-64kUpgrade linux-image-5.15.0-1082-nvidiaUpgrade linux-image-virtualUpgrade linux-image-lowlatency-64kUpgrade linux-image-gkeopUpgrade linux-image-generic-lpae-5.15Upgrade linux-image-5.15.0-144-lowlatency-64kUpgrade linux-image-5.15.0-144-fipsUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-oem-22.04aUpgrade linux-image-6.8.0-1041-gcp-64kUpgrade linux-image-ibmUpgrade linux-image-azure-lts-22.04Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-lowlatency-6.8Upgrade linux-image-6.14.0-1007-oracle-64kUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-5.15.0-1094-azure-fipsUpgrade linux-image-gke-5.15Upgrade linux-image-6.14.0-22-generic-64kUpgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-raspi-nolpaeUpgrade linux-image-aws-64k-5.15Upgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-5.15.0-1088-awsUpgrade linux-image-azure-lts-24.04Upgrade linux-image-intel-iotg-5.15Upgrade linux-image-5.15.0-1030-nvidia-tegra-igxUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-gkeop-6.8Upgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-5.15.0-1041-nvidia-tegra-rtUpgrade linux-image-gke-64kUpgrade linux-image-6.14.0-1004-realtimeUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-ibm-5.15Upgrade linux-image-gcp-6.8Upgrade linux-image-6.8.0-1040-aws-64kUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-oracleUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.15.0-1041-nvidia-tegraUpgrade linux-image-5.15.0-1052-xilinx-zynqmpUpgrade linux-image-nvidiaUpgrade linux-image-nvidia-tegraUpgrade linux-image-generic-lpaeUpgrade linux-image-oem-22.04Upgrade linux-image-generic-5.15Upgrade linux-image-gcp-5.15Upgrade linux-image-nvidia-6.8Upgrade linux-image-oem-20.04Upgrade linux-image-oem-20.04bUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-kvm-5.15Upgrade linux-image-generic-64k-5.15Upgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-6.8.0-85-lowlatency-64kUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-fipsUpgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-gcp-fips-5.15Upgrade linux-image-genericUpgrade linux-image-azure-nvidia-6.8Upgrade linux-image-6.14.0-1007-raspiUpgrade linux-image-5.15.0-1094-azureUpgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-gkeUpgrade linux-image-5.15.0-1030-nvidia-tegra-igx-rt | Jun 26, 2025 | May 1, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 13, 2025 | May 1, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub