In the Linux kernel, the following vulnerability has been resolved:
9p/net: fix improper handling of bogus negative read/write replies
In p9_client_write() and p9_client_read_once(), if the server incorrectly replies with success but a negative write/read count then we would consider written (negative) <= rsize (positive) because both variables were signed.
Make variables unsigned to avoid this problem.
The reproducer linked below now fails with the following error instead of a null pointer deref: 9pnet: bogus RWRITE count (4294967295 > 3)
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linuxUpgrade linux-6.1 | May 15, 2025 | May 9, 2025 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 9, 2025 |
| Suse | — | Upgrade kernel-kvmsmall-develUpgrade kselftests-kmp-64kbUpgrade dtb-exynosUpgrade kselftests-kmp-azureUpgrade kernel-zfcpdumpUpgrade dtb-appleUpgrade dtb-caviumUpgrade reiserfs-kmp-rtUpgrade kernel-rt-livepatch-develUpgrade kernel-source-azureUpgrade dtb-amdUpgrade kernel-rt_debug-vdsoUpgrade dlm-kmp-defaultUpgrade dtb-amlogicUpgrade dlm-kmp-64kbUpgrade dtb-hisiliconUpgrade kernel-azure-optionalUpgrade kernel-rt-optionalUpgrade dtb-lgUpgrade kernel-64kb-optionalUpgrade kernel-kvmsmall-vdsoUpgrade ocfs2-kmp-rtUpgrade dtb-amazonUpgrade reiserfs-kmp-64kbUpgrade kernel-source-vanillaUpgrade dtb-alteraUpgrade dtb-broadcomUpgrade kernel-debug-develUpgrade kernel-docs-htmlUpgrade kernel-syms-rtUpgrade kernel-rt_debugUpgrade ocfs2-kmp-64kbUpgrade ocfs2-kmp-azureUpgrade kernel-default-manUpgrade kernel-rt_debug-develUpgrade kernel-64kbUpgrade kernel-azure-vdsoUpgrade gfs2-kmp-azureUpgrade kernel-rt-vdsoUpgrade kernel-sourceUpgrade kernel-azure-extraUpgrade kernel-kvmsmallUpgrade dtb-renesasUpgrade gfs2-kmp-64kbUpgrade kernel-default-develUpgrade kernel-source-rtUpgrade kernel-symsUpgrade dtb-socionextUpgrade cluster-md-kmp-azureUpgrade kernel-azureUpgrade kernel-default-extraUpgrade kernel-debugUpgrade kernel-default-livepatch-develUpgrade gfs2-kmp-rtUpgrade kernel-default-baseUpgrade reiserfs-kmp-defaultUpgrade dtb-marvellUpgrade kernel-default-livepatchUpgrade dtb-freescaleUpgrade dtb-armUpgrade kernel-docsUpgrade kernel-obs-buildUpgrade dtb-nvidiaUpgrade kernel-64kb-develUpgrade kernel-syms-azureUpgrade dtb-xilinxUpgrade dtb-allwinnerUpgrade kernel-debug-vdsoUpgrade reiserfs-kmp-azureUpgrade kselftests-kmp-defaultUpgrade kernel-default-optionalUpgrade dtb-sprdUpgrade kernel-64kb-extraUpgrade kernel-default-base-rebuildUpgrade kernel-obs-qaUpgrade gfs2-kmp-defaultUpgrade kernel-macrosUpgrade kernel-devel-azureUpgrade kernel-default-vdsoUpgrade kernel-defaultUpgrade kernel-azure-develUpgrade kernel-devel-rtUpgrade kernel-rtUpgrade dtb-rockchipUpgrade dlm-kmp-azureUpgrade cluster-md-kmp-defaultUpgrade kernel-rt-extraUpgrade dlm-kmp-rtUpgrade dtb-apmUpgrade cluster-md-kmp-rtUpgrade cluster-md-kmp-64kbUpgrade kselftests-kmp-rtUpgrade dtb-mediatekUpgrade ocfs2-kmp-defaultUpgrade kernel-rt-develUpgrade kernel-develUpgrade dtb-qcom | Dec 5, 2025 | Jun 12, 2025 |
| Ubuntu | — | Upgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-aws-6.8Upgrade linux-image-gcpUpgrade linux-image-kvmUpgrade linux-image-realtime-6.8.1Upgrade linux-image-azure-fipsUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-6.14.0-1007-oracleUpgrade linux-image-oracle-64kUpgrade linux-image-xilinxUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-intel-iot-realtimeUpgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-intel-iotgUpgrade linux-image-gcp-64kUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-fips-6.8Upgrade linux-image-oem-22.04dUpgrade linux-image-gcp-fipsUpgrade linux-image-azure-fips-6.8Upgrade linux-image-6.14.0-1007-azure-fdeUpgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-azure-fdeUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-aws-64kUpgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-azureUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-6.14.0-22-genericUpgrade linux-image-generic-64k-6.8Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-generic-6.8Upgrade linux-image-oem-22.04cUpgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-nvidia-6.8Upgrade linux-image-aws-lts-24.04Upgrade linux-image-virtual-6.8Upgrade linux-image-realtime-hwe-22.04Upgrade linux-image-azure-6.8Upgrade linux-image-gcp-64k-6.8Upgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-raspi-realtimeUpgrade linux-image-oem-22.04bUpgrade linux-image-6.14.0-1007-azureUpgrade linux-image-gke-64kUpgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-aws-64k-6.8Upgrade linux-image-oracle-6.8Upgrade linux-image-realtimeUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-nvidia-64kUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-6.14.0-1007-aws-64kUpgrade linux-image-6.8.0-1046-awsUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-raspiUpgrade linux-image-raspi-6.8Upgrade linux-image-gke-64k-6.8Upgrade linux-image-aws-fips-6.8Upgrade linux-image-gcp-fips-6.8Upgrade linux-image-ibm-6.8Upgrade linux-image-xilinx-6.8Upgrade linux-image-awsUpgrade linux-image-gke-6.8Upgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-6.14.0-1007-awsUpgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-nvidiaUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-oem-22.04aUpgrade linux-image-gkeopUpgrade linux-image-aws-fipsUpgrade linux-image-6.14.0-1007-raspiUpgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-oem-22.04Upgrade linux-image-ibmUpgrade linux-image-6.14.0-22-generic-64kUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-oracle-64k-6.8Upgrade linux-image-lowlatency-6.8Upgrade linux-image-6.8.0-100-genericUpgrade linux-image-6.14.0-1008-gcpUpgrade linux-image-gcp-6.8Upgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-generic-64kUpgrade linux-image-lowlatencyUpgrade linux-image-oracleUpgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-generic-lpaeUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-6.8.0-100-fipsUpgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-6.14.0-1008-gcp-64kUpgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-6.8.0-1046-azureUpgrade linux-image-genericUpgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-6.14.0-1004-realtimeUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-fipsUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-6.8.0-1051-azureUpgrade linux-image-gkeUpgrade linux-image-gkeop-6.8Upgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-virtualUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-azure-lts-24.04Upgrade linux-image-ibm-classicUpgrade linux-image-6.14.0-1007-oracle-64k | Jun 26, 2025 | May 9, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jul 2, 2025 | May 9, 2025 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub