In the Linux kernel, the following vulnerability has been resolved:
9p/net: fix improper handling of bogus negative read/write replies
In p9_client_write() and p9_client_read_once(), if the server incorrectly replies with success but a negative write/read count then we would consider written (negative) <= rsize (positive) because both variables were signed.
Make variables unsigned to avoid this problem.
The reproducer linked below now fails with the following error instead of a null pointer deref: 9pnet: bogus RWRITE count (4294967295 > 3)
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linuxUpgrade linux-6.1 | May 15, 2025 | May 9, 2025 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 9, 2025 |
| Suse | — | Upgrade dlm-kmp-64kbUpgrade dtb-hisiliconUpgrade kernel-sourceUpgrade ocfs2-kmp-64kbUpgrade ocfs2-kmp-azureUpgrade kernel-default-manUpgrade kernel-rt-vdsoUpgrade reiserfs-kmp-defaultUpgrade kernel-rt-optionalUpgrade dtb-lgUpgrade kernel-64kb-optionalUpgrade reiserfs-kmp-64kbUpgrade kernel-default-livepatchUpgrade kernel-rt-livepatch-develUpgrade dtb-marvellUpgrade kernel-syms-rtUpgrade dtb-broadcomUpgrade kernel-rt_debug-vdsoUpgrade kernel-source-azureUpgrade cluster-md-kmp-azureUpgrade kselftests-kmp-azureUpgrade reiserfs-kmp-rtUpgrade kernel-zfcpdumpUpgrade dlm-kmp-defaultUpgrade kernel-rt_debugUpgrade kernel-rt_debug-develUpgrade dtb-amlogicUpgrade dtb-amazonUpgrade kernel-kvmsmall-develUpgrade dtb-alteraUpgrade dtb-exynosUpgrade kernel-azure-optionalUpgrade dtb-amdUpgrade dtb-appleUpgrade dtb-caviumUpgrade kernel-debug-develUpgrade kernel-symsUpgrade kernel-debugUpgrade kernel-kvmsmallUpgrade kernel-default-baseUpgrade kernel-default-develUpgrade kselftests-kmp-64kbUpgrade kernel-docs-htmlUpgrade kernel-default-extraUpgrade kernel-source-rtUpgrade ocfs2-kmp-rtUpgrade kernel-azure-vdsoUpgrade kernel-source-vanillaUpgrade gfs2-kmp-64kbUpgrade gfs2-kmp-azureUpgrade kernel-64kbUpgrade dtb-renesasUpgrade kernel-kvmsmall-vdsoUpgrade dtb-freescaleUpgrade dtb-socionextUpgrade kernel-azureUpgrade kernel-default-livepatch-develUpgrade gfs2-kmp-rtUpgrade kernel-azure-extraUpgrade kernel-default-base-rebuildUpgrade dtb-allwinnerUpgrade gfs2-kmp-defaultUpgrade kernel-devel-azureUpgrade kernel-64kb-develUpgrade dtb-nvidiaUpgrade kernel-debug-vdsoUpgrade dtb-sprdUpgrade kernel-64kb-extraUpgrade kselftests-kmp-defaultUpgrade kernel-docsUpgrade kernel-default-optionalUpgrade reiserfs-kmp-azureUpgrade kernel-obs-qaUpgrade kernel-devel-rtUpgrade kernel-develUpgrade dtb-qcomUpgrade ocfs2-kmp-defaultUpgrade kselftests-kmp-rtUpgrade cluster-md-kmp-64kbUpgrade dtb-mediatekUpgrade dtb-apmUpgrade cluster-md-kmp-rtUpgrade dtb-rockchipUpgrade dlm-kmp-rtUpgrade dlm-kmp-azureUpgrade cluster-md-kmp-defaultUpgrade kernel-rt-extraUpgrade kernel-rt-develUpgrade kernel-syms-azureUpgrade kernel-obs-buildUpgrade dtb-xilinxUpgrade dtb-armUpgrade kernel-rtUpgrade kernel-default-vdsoUpgrade kernel-defaultUpgrade kernel-azure-develUpgrade kernel-macros | Dec 5, 2025 | Jun 12, 2025 |
| Ubuntu | — | Upgrade linux-image-gke-64k-6.8Upgrade linux-image-ibm-6.8Upgrade linux-image-raspi-6.8Upgrade linux-image-oracle-6.8Upgrade linux-image-oem-22.04bUpgrade linux-image-gcp-64kUpgrade linux-image-raspiUpgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-aws-64k-6.8Upgrade linux-image-generic-6.8Upgrade linux-image-6.14.0-1007-aws-64kUpgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-6.14.0-1007-azure-fdeUpgrade linux-image-generic-64k-6.8Upgrade linux-image-azure-fips-6.8Upgrade linux-image-fips-6.8Upgrade linux-image-aws-64kUpgrade linux-image-aws-6.8Upgrade linux-image-nvidia-6.8Upgrade linux-image-azureUpgrade linux-image-gcp-fipsUpgrade linux-image-kvmUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-oem-22.04cUpgrade linux-image-oem-22.04dUpgrade linux-image-azure-fdeUpgrade linux-image-raspi-realtimeUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-gke-64kUpgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-6.8.0-1046-awsUpgrade linux-image-aws-fips-6.8Upgrade linux-image-6.14.0-1007-oracleUpgrade linux-image-intel-iotgUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-6.14.0-1007-azureUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-virtual-6.8Upgrade linux-image-xilinx-6.8Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-nvidia-64kUpgrade linux-image-azure-6.8Upgrade linux-image-aws-lts-24.04Upgrade linux-image-realtime-hwe-22.04Upgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-realtimeUpgrade linux-image-oracle-64kUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-azure-fipsUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-6.14.0-22-genericUpgrade linux-image-realtime-6.8.1Upgrade linux-image-xilinxUpgrade linux-image-gke-6.8Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-gcpUpgrade linux-image-gcp-fips-6.8Upgrade linux-image-awsUpgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-6.8.0-100-fipsUpgrade linux-image-lowlatency-64kUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-6.14.0-1008-gcp-64kUpgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-6.14.0-1004-realtimeUpgrade linux-image-genericUpgrade linux-image-fipsUpgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-6.8.0-1051-azureUpgrade linux-image-oem-22.04Upgrade linux-image-lowlatencyUpgrade linux-image-gkeop-6.8Upgrade linux-image-gkeopUpgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-6.14.0-1007-awsUpgrade linux-image-ibm-classicUpgrade linux-image-ibmUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-6.14.0-1007-oracle-64kUpgrade linux-image-oem-22.04aUpgrade linux-image-6.14.0-22-generic-64kUpgrade linux-image-lowlatency-6.8Upgrade linux-image-oracle-64k-6.8Upgrade linux-image-gcp-6.8Upgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-6.14.0-1008-gcpUpgrade linux-image-nvidiaUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-aws-fipsUpgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-6.14.0-1007-raspiUpgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-6.8.0-1046-azureUpgrade linux-image-oracleUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-azure-lts-24.04Upgrade linux-image-virtualUpgrade linux-image-generic-64kUpgrade linux-image-6.8.0-100-genericUpgrade linux-image-gkeUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-generic-lpae | Jun 26, 2025 | May 9, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jul 2, 2025 | May 9, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub