In the Linux kernel, the following vulnerability has been resolved:
nvmet: fix out-of-bounds access in nvmet_enable_port
When trying to enable a port that has no transport configured yet, nvmet_enable_port() uses NVMF_TRTYPE_MAX (255) to query the transports array, causing an out-of-bounds access:
[ 106.058694] BUG: KASAN: global-out-of-bounds in nvmet_enable_port+0x42/0x1da [ 106.058719] Read of size 8 at addr ffffffff89dafa58 by task ln/632 [...] [ 106.076026] nvmet: transport type 255 not supported
Since commit 200adac75888, NVMF_TRTYPE_MAX is the default state as configured by nvmet_ports_make(). Avoid this by checking for NVMF_TRTYPE_MAX before proceeding.
CVSS Details
- CVSS 3.1 Base Score: 7.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Redhat_linux | — | — | Jul 9, 2025 | May 8, 2025 |
| Suse | — | Upgrade kernel-default-extraUpgrade kernel-source-azureUpgrade kernel-symsUpgrade kernel-kvmsmall-vdsoUpgrade kernel-obs-qaUpgrade kernel-kvmsmall-develUpgrade kernel-sourceUpgrade kernel-devel-azureUpgrade kernel-default-develUpgrade kernel-azure-develUpgrade kernel-default-livepatchUpgrade kernel-zfcpdumpUpgrade kernel-azure-vdsoUpgrade kernel-64kbUpgrade kernel-macrosUpgrade kernel-kvmsmallUpgrade kernel-default-vdsoUpgrade kernel-docsUpgrade kernel-develUpgrade kernel-source-vanillaUpgrade kernel-defaultUpgrade kernel-azure-extraUpgrade kernel-docs-htmlUpgrade kernel-azureUpgrade kernel-64kb-extraUpgrade kernel-64kb-devel | Dec 5, 2025 | Dec 5, 2025 |
| Ubuntu | — | Upgrade linux-image-aws-64kUpgrade linux-image-realtimeUpgrade linux-image-generic-64kUpgrade linux-image-6.14.0-1007-azure-fdeUpgrade linux-image-6.14.0-1007-oracleUpgrade linux-image-oracle-64kUpgrade linux-image-6.14.0-1004-realtimeUpgrade linux-image-oracleUpgrade linux-image-genericUpgrade linux-image-6.14.0-22-generic-64kUpgrade linux-image-gcpUpgrade linux-image-azure-fdeUpgrade linux-image-raspiUpgrade linux-image-azureUpgrade linux-image-6.14.0-1007-aws-64kUpgrade linux-image-6.14.0-1007-oracle-64kUpgrade linux-image-6.14.0-1008-gcpUpgrade linux-image-6.14.0-1007-azureUpgrade linux-image-awsUpgrade linux-image-6.14.0-1007-raspiUpgrade linux-image-gcp-64kUpgrade linux-image-6.14.0-1008-gcp-64kUpgrade linux-image-6.14.0-1007-awsUpgrade linux-image-6.14.0-22-generic | Jun 26, 2025 | May 8, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub