In the Linux kernel, the following vulnerability has been resolved:
9p/net: fix improper handling of bogus negative read/write replies
In p9_client_write() and p9_client_read_once(), if the server incorrectly replies with success but a negative write/read count then we would consider written (negative) <= rsize (positive) because both variables were signed.
Make variables unsigned to avoid this problem.
The reproducer linked below now fails with the following error instead of a null pointer deref: 9pnet: bogus RWRITE count (4294967295 > 3)
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux-6.1Upgrade linux | May 15, 2025 | May 9, 2025 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 9, 2025 |
| Suse | — | Upgrade kernel-64kbUpgrade kernel-zfcpdumpUpgrade dtb-socionextUpgrade dtb-amazonUpgrade dtb-amdUpgrade dtb-caviumUpgrade kselftests-kmp-64kbUpgrade dtb-exynosUpgrade kernel-kvmsmall-develUpgrade reiserfs-kmp-64kbUpgrade gfs2-kmp-rtUpgrade kernel-default-baseUpgrade kernel-default-develUpgrade kernel-debugUpgrade kernel-kvmsmallUpgrade kernel-default-manUpgrade kernel-azureUpgrade dtb-renesasUpgrade kernel-source-rtUpgrade kernel-azure-vdsoUpgrade kernel-syms-rtUpgrade kernel-default-extraUpgrade cluster-md-kmp-azureUpgrade kernel-default-livepatch-develUpgrade dtb-appleUpgrade kernel-rt_debugUpgrade kernel-rt_debug-develUpgrade kernel-docs-htmlUpgrade dlm-kmp-64kbUpgrade gfs2-kmp-azureUpgrade dtb-lgUpgrade kernel-64kb-optionalUpgrade dtb-hisiliconUpgrade reiserfs-kmp-rtUpgrade dtb-marvellUpgrade kselftests-kmp-azureUpgrade dtb-freescaleUpgrade kernel-rt-livepatch-develUpgrade kernel-rt_debug-vdsoUpgrade gfs2-kmp-64kbUpgrade kernel-kvmsmall-vdsoUpgrade ocfs2-kmp-rtUpgrade dlm-kmp-defaultUpgrade kernel-source-vanillaUpgrade dtb-amlogicUpgrade kernel-source-azureUpgrade kernel-azure-optionalUpgrade dtb-alteraUpgrade dtb-broadcomUpgrade kernel-sourceUpgrade ocfs2-kmp-64kbUpgrade kernel-rt-vdsoUpgrade ocfs2-kmp-azureUpgrade reiserfs-kmp-defaultUpgrade kernel-default-livepatchUpgrade kernel-rt-optionalUpgrade kernel-debug-develUpgrade kernel-symsUpgrade kernel-azure-extraUpgrade dtb-rockchipUpgrade kernel-64kb-develUpgrade kernel-rtUpgrade dtb-nvidiaUpgrade dtb-qcomUpgrade kernel-devel-rtUpgrade kernel-develUpgrade cluster-md-kmp-rtUpgrade cluster-md-kmp-64kbUpgrade kernel-obs-buildUpgrade dtb-apmUpgrade dtb-mediatekUpgrade ocfs2-kmp-defaultUpgrade kselftests-kmp-rtUpgrade kernel-debug-vdsoUpgrade kernel-64kb-extraUpgrade kernel-rt-develUpgrade dlm-kmp-rtUpgrade dlm-kmp-azureUpgrade cluster-md-kmp-defaultUpgrade kernel-rt-extraUpgrade dtb-allwinnerUpgrade dtb-sprdUpgrade kselftests-kmp-defaultUpgrade kernel-docsUpgrade kernel-default-optionalUpgrade reiserfs-kmp-azureUpgrade dtb-armUpgrade dtb-xilinxUpgrade kernel-syms-azureUpgrade kernel-macrosUpgrade kernel-default-base-rebuildUpgrade kernel-azure-develUpgrade gfs2-kmp-defaultUpgrade kernel-obs-qaUpgrade kernel-defaultUpgrade kernel-default-vdsoUpgrade kernel-devel-azure | Dec 5, 2025 | Jun 12, 2025 |
| Ubuntu | — | Upgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-6.14.0-1008-gcp-64kUpgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-6.8.0-1046-azureUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-raspi-realtime-6.8Upgrade linux-image-generic-64kUpgrade linux-image-6.14.0-1008-gcpUpgrade linux-image-ibm-classicUpgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-gcp-6.8Upgrade linux-image-6.8.0-100-genericUpgrade linux-image-oem-22.04Upgrade linux-image-6.14.0-1007-oracle-64kUpgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-azure-lts-24.04Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-6.8.0-1051-azureUpgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-gkeUpgrade linux-image-gkeopUpgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-gkeop-6.8Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-ibmUpgrade linux-image-virtualUpgrade linux-image-lowlatencyUpgrade linux-image-oem-22.04aUpgrade linux-image-6.14.0-1007-awsUpgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-fipsUpgrade linux-image-lowlatency-64kUpgrade linux-image-lowlatency-6.8Upgrade linux-image-aws-fipsUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-generic-lpaeUpgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-genericUpgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-oracleUpgrade linux-image-6.14.0-1007-raspiUpgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-6.14.0-22-generic-64kUpgrade linux-image-6.8.0-100-fipsUpgrade linux-image-nvidiaUpgrade linux-image-6.14.0-1004-realtimeUpgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-intel-iot-realtimeUpgrade linux-image-oracle-64kUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-awsUpgrade linux-image-azure-fdeUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-oem-22.04cUpgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-azure-fipsUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-virtual-6.8Upgrade linux-image-realtime-hwe-22.04Upgrade linux-image-nvidia-64kUpgrade linux-image-realtimeUpgrade linux-image-azure-6.8Upgrade linux-image-gcp-64k-6.8Upgrade linux-image-aws-lts-24.04Upgrade linux-image-realtime-6.8.1Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-kvmUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-xilinxUpgrade linux-image-xilinx-6.8Upgrade linux-image-6.14.0-1007-aws-64kUpgrade linux-image-ibm-6.8Upgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-aws-fips-6.8Upgrade linux-image-aws-6.8Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-generic-64k-6.8Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-azure-fips-6.8Upgrade linux-image-fips-6.8Upgrade linux-image-gcp-fipsUpgrade linux-image-raspiUpgrade linux-image-gcpUpgrade linux-image-raspi-6.8Upgrade linux-image-gke-6.8Upgrade linux-image-gcp-fips-6.8Upgrade linux-image-gcp-64kUpgrade linux-image-6.8.0-1046-awsUpgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-6.14.0-22-genericUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-oracle-6.8Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-gke-64k-6.8Upgrade linux-image-generic-6.8Upgrade linux-image-aws-64k-6.8Upgrade linux-image-oem-22.04bUpgrade linux-image-nvidia-6.8Upgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-6.14.0-1007-azureUpgrade linux-image-raspi-realtimeUpgrade linux-image-6.14.0-1007-oracleUpgrade linux-image-intel-iotgUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-azureUpgrade linux-image-aws-64kUpgrade linux-image-6.14.0-1007-azure-fdeUpgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-oem-22.04dUpgrade linux-image-gke-64kUpgrade linux-image-generic-hwe-22.04 | Jun 26, 2025 | May 9, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jul 2, 2025 | May 9, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub