In the Linux kernel, the following vulnerability has been resolved:
net: tls: explicitly disallow disconnect
syzbot discovered that it can disconnect a TLS socket and then run into all sort of unexpected corner cases. I have a vague recollection of Eric pointing this out to us a long time ago. Supporting disconnect is really hard, for one thing if offload is enabled we'd need to wait for all packets to be _acked_. Disconnect is not commonly used, disallow it.
The immediate problem syzbot run into is the warning in the strp, but that's just the easiest bug to trigger:
WARNING: CPU: 0 PID: 5834 at net/tls/tls_strp.c:486 tls_strp_msg_load+0x72e/0xa80 net/tls/tls_strp.c:486 RIP: 0010:tls_strp_msg_load+0x72e/0xa80 net/tls/tls_strp.c:486 Call Trace: <TASK> tls_rx_rec_wait+0x280/0xa60 net/tls/tls_sw.c:1363 tls_sw_recvmsg+0x85c/0x1c30 net/tls/tls_sw.c:2043 inet6_recvmsg+0x2c9/0x730 net/ipv6/af_inet6.c:678 sock_recvmsg_nosec net/socket.c:1023 [inline] sock_recvmsg+0x109/0x280 net/socket.c:1045 __sys_recvfrom+0x202/0x380 net/socket.c:2237
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-livepatch-5.15.184-125.190Upgrade kernel-headersUpgrade python-perfUpgrade kernelUpgrade kernel-livepatch-5.15.182-123.190Upgrade kernel-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade bpftool-debuginfoUpgrade python-perf-debuginfoUpgrade kernel-toolsUpgrade kernel-livepatch-5.10.237-230.949Upgrade kernel-debuginfo-common-aarch64Upgrade perf-debuginfoUpgrade kernel-develUpgrade kernel-tools-develUpgrade kernel-tools-debuginfoUpgrade perfUpgrade bpftool | Jun 24, 2025 | May 1, 2025 |
| Amazon_linux_2023 | — | Upgrade kernel-libbpf-staticUpgrade kernel-modules-extra-commonUpgrade kernel-libbpf-debuginfoUpgrade kernelUpgrade kernel-toolsUpgrade perf6.12Upgrade bpftoolUpgrade kernel-libbpf-develUpgrade kernel-debuginfo-common-aarch64Upgrade perfUpgrade python3-perf6.12-debuginfoUpgrade python3-perf-debuginfoUpgrade kernel-modules-extraUpgrade perf6.12-debuginfoUpgrade kernel-libbpfUpgrade python3-perf6.12Upgrade kernel-develUpgrade kernel-livepatch-6.12.25-32.101Upgrade bpftool-debuginfoUpgrade kernel6.12-modules-extraUpgrade kernel6.12-debuginfo-common-x86_64Upgrade kernel-livepatch-6.1.140-154.222Upgrade kernel-headersUpgrade python3-perfUpgrade kernel6.12Upgrade kernel-tools-debuginfoUpgrade kernel-debuginfoUpgrade kernel6.12-debuginfoUpgrade perf-debuginfoUpgrade kernel6.12-debuginfo-common-aarch64Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-devel | Jun 24, 2025 | May 1, 2025 |
| Debian | — | Upgrade linux-6.1Upgrade linux | May 5, 2025 | May 1, 2025 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernelUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade bpftoolUpgrade python3-perfUpgrade kernel-abi-stablelists | Oct 14, 2025 | Oct 10, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade bpftoolUpgrade python3-perfUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernel-abi-stablelists | Nov 12, 2025 | Oct 10, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade bpftoolUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade kernel | Oct 24, 2025 | Oct 10, 2025 |
| Oracle_linux | — | Upgrade kernel-uek | Jul 17, 2025 | May 1, 2025 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 1, 2025 |
| Suse | — | Upgrade dtb-allwinnerUpgrade kernel-develUpgrade dtb-amazonUpgrade ocfs2-kmp-defaultUpgrade kernel-64kb-develUpgrade dtb-renesasUpgrade kernel-default-livepatchUpgrade kernel-default-optionalUpgrade kernel-devel-rtUpgrade dtb-mediatekUpgrade dtb-sprdUpgrade kernel-docs-htmlUpgrade kernel-64kbUpgrade gfs2-kmp-64kbUpgrade gfs2-kmp-defaultUpgrade kernel-azure-extraUpgrade reiserfs-kmp-defaultUpgrade dtb-freescaleUpgrade kernel-debugUpgrade kernel-default-develUpgrade reiserfs-kmp-rtUpgrade dtb-xilinxUpgrade kernel-rt_debug-develUpgrade dtb-nvidiaUpgrade kernel-default-livepatch-develUpgrade dtb-socionextUpgrade kernel-docsUpgrade kernel-rt-develUpgrade dlm-kmp-azureUpgrade dlm-kmp-rtUpgrade dtb-amdUpgrade dtb-marvellUpgrade kernel-debug-develUpgrade kernel-debug-vdsoUpgrade kernel-symsUpgrade kselftests-kmp-rtUpgrade kernel-source-vanillaUpgrade dtb-caviumUpgrade kernel-azureUpgrade kselftests-kmp-defaultUpgrade kernel-64kb-extraUpgrade ocfs2-kmp-64kbUpgrade dtb-hisiliconUpgrade dlm-kmp-defaultUpgrade dtb-broadcomUpgrade kernel-default-baseUpgrade cluster-md-kmp-rtUpgrade dtb-appleUpgrade cluster-md-kmp-64kbUpgrade gfs2-kmp-azureUpgrade ocfs2-kmp-azureUpgrade kernel-64kb-optionalUpgrade kernel-rt_debugUpgrade kernel-defaultUpgrade kselftests-kmp-64kbUpgrade cluster-md-kmp-azureUpgrade kernel-default-vdsoUpgrade kernel-source-azureUpgrade kernel-sourceUpgrade kernel-rtUpgrade kernel-kvmsmall-develUpgrade kernel-azure-optionalUpgrade kernel-rt-vdsoUpgrade kernel-macrosUpgrade dtb-lgUpgrade dtb-armUpgrade reiserfs-kmp-azureUpgrade kernel-default-manUpgrade kernel-rt-extraUpgrade dtb-exynosUpgrade kselftests-kmp-azureUpgrade kernel-azure-vdsoUpgrade gfs2-kmp-rtUpgrade reiserfs-kmp-64kbUpgrade kernel-syms-rtUpgrade kernel-rt-optionalUpgrade kernel-kvmsmallUpgrade kernel-default-base-rebuildUpgrade kernel-rt-livepatch-develUpgrade kernel-devel-azureUpgrade ocfs2-kmp-rtUpgrade dtb-apmUpgrade dlm-kmp-64kbUpgrade kernel-default-extraUpgrade kernel-obs-qaUpgrade dtb-alteraUpgrade kernel-source-rtUpgrade kernel-obs-buildUpgrade dtb-rockchipUpgrade dtb-qcomUpgrade kernel-syms-azureUpgrade kernel-rt_debug-vdsoUpgrade kernel-azure-develUpgrade dtb-amlogicUpgrade kernel-kvmsmall-vdsoUpgrade kernel-zfcpdumpUpgrade cluster-md-kmp-default | Dec 5, 2025 | Jul 8, 2025 |
| Ubuntu | — | Upgrade linux-image-gcpUpgrade linux-image-gkeop-5.15Upgrade linux-image-realtime-5.15Upgrade linux-image-6.8.0-85-genericUpgrade linux-image-5.15.0-1088-realtimeUpgrade linux-image-5.15.0-144-genericUpgrade linux-image-kvmUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-raspi-realtimeUpgrade linux-image-6.8.0-1040-raspiUpgrade linux-image-5.15.0-144-generic-64kUpgrade linux-image-6.8.0-1038-ibmUpgrade linux-image-6.14.0-1007-aws-64kUpgrade linux-image-6.8.0-1040-nvidia-lowlatencyUpgrade linux-image-fips-5.15Upgrade linux-image-gke-64k-6.8Upgrade linux-image-5.15.0-1070-gkeopUpgrade linux-image-5.15.0-1083-intel-iotgUpgrade linux-image-generic-64k-6.8Upgrade linux-image-6.8.0-1037-oracleUpgrade linux-image-5.15.0-1087-gcpUpgrade linux-image-gcp-fipsUpgrade linux-image-gke-6.8Upgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-azure-5.15Upgrade linux-image-nvidia-tegra-igxUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-6.8.0-1041-gcpUpgrade linux-image-5.15.0-1080-ibmUpgrade linux-image-aws-5.15Upgrade linux-image-gcp-64k-6.8Upgrade linux-image-raspiUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-generic-6.8Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-6.14.0-1007-azure-fdeUpgrade linux-image-aws-lts-24.04Upgrade linux-image-realtimeUpgrade linux-image-6.8.0-85-lowlatencyUpgrade linux-image-6.14.0-1007-awsUpgrade linux-image-6.8.0-1025-azure-nvidiaUpgrade linux-image-6.8.0-1040-awsUpgrade linux-image-6.8.0-1040-nvidia-64kUpgrade linux-image-azure-fde-6.8Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-oem-20.04cUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-oem-22.04cUpgrade linux-image-oracle-5.15Upgrade linux-image-intelUpgrade linux-image-5.15.0-1085-oracleUpgrade linux-image-6.8.0-1037-oracle-64kUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-oracle-6.8Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-azure-cvmUpgrade linux-image-generic-64kUpgrade linux-image-oem-20.04dUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-6.8.0-1040-nvidiaUpgrade linux-image-aws-64kUpgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-6.14.0-22-genericUpgrade linux-image-oem-22.04dUpgrade linux-image-awsUpgrade linux-image-azure-fipsUpgrade linux-image-azure-6.8Upgrade linux-image-aws-64k-6.8Upgrade linux-image-6.14.0-1007-oracleUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-intel-iotgUpgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-raspi-5.15Upgrade linux-image-virtual-6.8Upgrade linux-image-6.8.0-1040-azure-fdeUpgrade linux-image-5.15.0-1087-gcp-fipsUpgrade linux-image-nvidia-64kUpgrade linux-image-virtual-5.15Upgrade linux-image-6.8.1-1035-realtimeUpgrade linux-image-aws-6.8Upgrade linux-image-oem-22.04bUpgrade linux-image-6.8.0-85-generic-64kUpgrade linux-image-gcp-64kUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-oracle-64kUpgrade linux-image-5.15.0-1084-kvmUpgrade linux-image-realtime-6.8.1Upgrade linux-image-azureUpgrade linux-image-6.8.0-1037-gkeUpgrade linux-image-raspi-6.8Upgrade linux-image-ibm-6.8Upgrade linux-image-azure-nvidia-lts-24.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-6.14.0-1007-azureUpgrade linux-image-nvidia-5.15Upgrade linux-image-6.8.0-1024-gkeopUpgrade linux-image-5.15.0-144-generic-lpaeUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-6.14.0-1008-gcpUpgrade linux-image-6.8.0-1040-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1041-gcp-64kUpgrade linux-image-azure-lts-22.04Upgrade linux-image-5.15.0-1030-nvidia-tegra-igx-rtUpgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-generic-lpae-5.15Upgrade linux-image-gkeopUpgrade linux-image-azure-nvidiaUpgrade linux-image-6.8.0-2031-raspi-realtimeUpgrade linux-image-6.8.0-1040-azureUpgrade linux-image-6.8.0-1037-gke-64kUpgrade linux-image-5.15.0-144-lowlatencyUpgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-5.15.0-1030-nvidia-tegra-igxUpgrade linux-image-5.15.0-1041-nvidia-tegraUpgrade linux-image-5.15.0-1041-nvidia-tegra-rtUpgrade linux-image-ibmUpgrade linux-image-gkeop-6.8Upgrade linux-image-gke-5.15Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-intel-iotg-5.15Upgrade linux-image-raspi-nolpaeUpgrade linux-image-lowlatencyUpgrade linux-image-aws-lts-22.04Upgrade linux-image-5.15.0-1082-nvidia-lowlatencyUpgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-ibm-classicUpgrade linux-image-azure-fdeUpgrade linux-image-5.15.0-1088-aws-fipsUpgrade linux-image-6.8.0-85-lowlatency-64kUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-kvm-5.15Upgrade linux-image-generic-64k-5.15Upgrade linux-image-lowlatency-5.15Upgrade linux-image-6.8.0-1040-aws-64kUpgrade linux-image-6.14.0-22-generic-64kUpgrade linux-image-6.14.0-1007-oracle-64kUpgrade linux-image-5.15.0-1094-azure-fipsUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-5.15.0-1083-raspiUpgrade linux-image-oem-20.04Upgrade linux-image-nvidia-tegra-rtUpgrade linux-image-ibm-5.15Upgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-nvidiaUpgrade linux-image-azure-lts-24.04Upgrade linux-image-aws-64k-5.15Upgrade linux-image-5.15.0-144-lowlatency-64kUpgrade linux-image-5.15.0-144-fipsUpgrade linux-image-5.15.0-1088-awsUpgrade linux-image-5.15.0-1052-xilinx-zynqmpUpgrade linux-image-nvidia-6.8Upgrade linux-image-gcp-5.15Upgrade linux-image-oem-22.04Upgrade linux-image-gke-64kUpgrade linux-image-oracleUpgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-oem-22.04aUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-nvidia-tegraUpgrade linux-image-generic-5.15Upgrade linux-image-lowlatency-6.8Upgrade linux-image-gcp-6.8Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.15.0-1088-aws-64kUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-5.15.0-1081-intel-iot-realtimeUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-oracle-64k-6.8Upgrade linux-image-azure-fips-5.15Upgrade linux-image-aws-fips-5.15Upgrade linux-image-aws-fipsUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-6.14.0-1008-gcp-64kUpgrade linux-image-5.15.0-1085-gkeUpgrade linux-image-5.15.0-1082-nvidiaUpgrade linux-image-virtualUpgrade linux-image-lowlatency-64kUpgrade linux-image-6.14.0-1004-realtimeUpgrade linux-image-generic-lpaeUpgrade linux-image-gkeUpgrade linux-image-genericUpgrade linux-image-fipsUpgrade linux-image-azure-nvidia-6.8Upgrade linux-image-6.14.0-1007-raspiUpgrade linux-image-5.15.0-1094-azureUpgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-oem-20.04bUpgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-gcp-fips-5.15 | Jun 26, 2025 | May 1, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 13, 2025 | May 1, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub