In the Linux kernel, the following vulnerability has been resolved:
9p/net: fix improper handling of bogus negative read/write replies
In p9_client_write() and p9_client_read_once(), if the server incorrectly replies with success but a negative write/read count then we would consider written (negative) <= rsize (positive) because both variables were signed.
Make variables unsigned to avoid this problem.
The reproducer linked below now fails with the following error instead of a null pointer deref: 9pnet: bogus RWRITE count (4294967295 > 3)
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linuxUpgrade linux-6.1 | May 15, 2025 | May 9, 2025 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 9, 2025 |
| Suse | — | Upgrade dtb-exynosUpgrade kernel-default-extraUpgrade kernel-default-livepatch-develUpgrade gfs2-kmp-rtUpgrade reiserfs-kmp-64kbUpgrade cluster-md-kmp-azureUpgrade dtb-amazonUpgrade dlm-kmp-64kbUpgrade dtb-alteraUpgrade kernel-rt-optionalUpgrade kernel-azure-optionalUpgrade kernel-64kb-optionalUpgrade kernel-kvmsmall-vdsoUpgrade dtb-hisiliconUpgrade kernel-source-vanillaUpgrade kernel-azure-vdsoUpgrade kernel-kvmsmall-develUpgrade dtb-appleUpgrade dtb-lgUpgrade ocfs2-kmp-rtUpgrade kernel-default-livepatchUpgrade kernel-rt-livepatch-develUpgrade dtb-marvellUpgrade kernel-rt_debug-vdsoUpgrade dlm-kmp-defaultUpgrade dtb-amlogicUpgrade dtb-broadcomUpgrade kselftests-kmp-azureUpgrade kernel-kvmsmallUpgrade kernel-source-rtUpgrade kernel-default-baseUpgrade kernel-default-develUpgrade kernel-azure-extraUpgrade kernel-debugUpgrade reiserfs-kmp-rtUpgrade kernel-source-azureUpgrade dtb-socionextUpgrade kernel-default-manUpgrade dtb-freescaleUpgrade kernel-symsUpgrade gfs2-kmp-azureUpgrade kernel-64kbUpgrade reiserfs-kmp-defaultUpgrade dtb-renesasUpgrade kernel-syms-rtUpgrade kernel-debug-develUpgrade kernel-rt_debugUpgrade kernel-docs-htmlUpgrade ocfs2-kmp-64kbUpgrade ocfs2-kmp-azureUpgrade kernel-azureUpgrade kernel-zfcpdumpUpgrade kselftests-kmp-64kbUpgrade dtb-amdUpgrade dtb-caviumUpgrade gfs2-kmp-64kbUpgrade kernel-rt_debug-develUpgrade kernel-sourceUpgrade kernel-rt-vdsoUpgrade kernel-macrosUpgrade kernel-rt-develUpgrade kernel-rtUpgrade dtb-rockchipUpgrade dlm-kmp-rtUpgrade dlm-kmp-azureUpgrade kernel-develUpgrade dtb-sprdUpgrade kernel-debug-vdsoUpgrade kernel-64kb-extraUpgrade dtb-allwinnerUpgrade dtb-qcomUpgrade kernel-devel-rtUpgrade kernel-default-base-rebuildUpgrade kernel-docsUpgrade kernel-default-optionalUpgrade reiserfs-kmp-azureUpgrade kselftests-kmp-defaultUpgrade dtb-mediatekUpgrade dtb-apmUpgrade cluster-md-kmp-rtUpgrade cluster-md-kmp-64kbUpgrade ocfs2-kmp-defaultUpgrade kselftests-kmp-rtUpgrade kernel-obs-buildUpgrade kernel-64kb-develUpgrade dtb-nvidiaUpgrade kernel-defaultUpgrade kernel-azure-develUpgrade gfs2-kmp-defaultUpgrade kernel-obs-qaUpgrade kernel-devel-azureUpgrade kernel-default-vdsoUpgrade kernel-syms-azureUpgrade dtb-xilinxUpgrade dtb-armUpgrade cluster-md-kmp-defaultUpgrade kernel-rt-extra | Dec 5, 2025 | Jun 12, 2025 |
| Ubuntu | — | Upgrade linux-image-gkeop-6.8Upgrade linux-image-lowlatencyUpgrade linux-image-gkeopUpgrade linux-image-gkeUpgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-oem-22.04Upgrade linux-image-6.14.0-1007-awsUpgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-oem-22.04aUpgrade linux-image-ibm-classicUpgrade linux-image-nvidiaUpgrade linux-image-genericUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-6.14.0-1004-realtimeUpgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-fipsUpgrade linux-image-aws-fipsUpgrade linux-image-6.14.0-1008-gcpUpgrade linux-image-lowlatency-64kUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-raspi-realtime-6.8Upgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-gcp-6.8Upgrade linux-image-lowlatency-6.8Upgrade linux-image-oracle-64k-6.8Upgrade linux-image-6.8.0-100-fipsUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-6.14.0-22-generic-64kUpgrade linux-image-6.8.0-1051-azureUpgrade linux-image-6.8.0-100-genericUpgrade linux-image-virtualUpgrade linux-image-6.14.0-1007-oracle-64kUpgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-oracleUpgrade linux-image-azure-lts-24.04Upgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-6.14.0-1008-gcp-64kUpgrade linux-image-6.8.0-1046-azureUpgrade linux-image-ibmUpgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-6.14.0-1007-raspiUpgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-generic-lpaeUpgrade linux-image-generic-64kUpgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-aws-lts-24.04Upgrade linux-image-raspi-6.8Upgrade linux-image-oem-22.04dUpgrade linux-image-oem-22.04cUpgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-6.14.0-1007-azureUpgrade linux-image-nvidia-6.8Upgrade linux-image-generic-6.8Upgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-oem-22.04bUpgrade linux-image-aws-64k-6.8Upgrade linux-image-raspi-realtimeUpgrade linux-image-azureUpgrade linux-image-azure-fips-6.8Upgrade linux-image-gcp-fipsUpgrade linux-image-fips-6.8Upgrade linux-image-aws-64kUpgrade linux-image-6.14.0-1007-azure-fdeUpgrade linux-image-virtual-6.8Upgrade linux-image-nvidia-64kUpgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-realtime-hwe-22.04Upgrade linux-image-aws-6.8Upgrade linux-image-generic-64k-6.8Upgrade linux-image-awsUpgrade linux-image-azure-6.8Upgrade linux-image-realtimeUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-intel-iot-realtimeUpgrade linux-image-gke-64kUpgrade linux-image-6.14.0-1007-oracleUpgrade linux-image-azure-fdeUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-xilinx-6.8Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-realtime-6.8.1Upgrade linux-image-oracle-64kUpgrade linux-image-kvmUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-gcp-64kUpgrade linux-image-gcp-fips-6.8Upgrade linux-image-gcpUpgrade linux-image-aws-fips-6.8Upgrade linux-image-6.8.0-1046-awsUpgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-6.14.0-22-genericUpgrade linux-image-6.14.0-1007-aws-64kUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-raspiUpgrade linux-image-oracle-6.8Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-ibm-6.8Upgrade linux-image-gke-64k-6.8Upgrade linux-image-gke-6.8Upgrade linux-image-xilinxUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-azure-fipsUpgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-intel-iotgUpgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-nvidia-lowlatency-64k-6.8 | Jun 26, 2025 | May 9, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jul 2, 2025 | May 9, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub