In the Linux kernel, the following vulnerability has been resolved:
9p/net: fix improper handling of bogus negative read/write replies
In p9_client_write() and p9_client_read_once(), if the server incorrectly replies with success but a negative write/read count then we would consider written (negative) <= rsize (positive) because both variables were signed.
Make variables unsigned to avoid this problem.
The reproducer linked below now fails with the following error instead of a null pointer deref: 9pnet: bogus RWRITE count (4294967295 > 3)
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux-6.1Upgrade linux | May 15, 2025 | May 9, 2025 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 9, 2025 |
| Suse | — | Upgrade kernel-docs-htmlUpgrade kernel-rt_debugUpgrade kernel-azure-optionalUpgrade kernel-kvmsmall-vdsoUpgrade dtb-freescaleUpgrade dtb-alteraUpgrade kselftests-kmp-azureUpgrade kernel-source-azureUpgrade kernel-rt_debug-develUpgrade kernel-zfcpdumpUpgrade dtb-amlogicUpgrade dtb-broadcomUpgrade dlm-kmp-defaultUpgrade dtb-marvellUpgrade kernel-kvmsmallUpgrade kernel-rt_debug-vdsoUpgrade reiserfs-kmp-rtUpgrade kernel-default-livepatchUpgrade dtb-renesasUpgrade kernel-debugUpgrade kernel-symsUpgrade kernel-default-baseUpgrade kernel-syms-rtUpgrade kernel-default-develUpgrade kernel-rt-livepatch-develUpgrade gfs2-kmp-rtUpgrade kernel-default-extraUpgrade dtb-amazonUpgrade kernel-azure-vdsoUpgrade cluster-md-kmp-azureUpgrade kernel-default-livepatch-develUpgrade reiserfs-kmp-64kbUpgrade kernel-source-rtUpgrade kselftests-kmp-64kbUpgrade dtb-amdUpgrade dtb-caviumUpgrade dtb-exynosUpgrade reiserfs-kmp-defaultUpgrade dtb-appleUpgrade kernel-kvmsmall-develUpgrade kernel-azureUpgrade gfs2-kmp-64kbUpgrade kernel-default-manUpgrade dtb-socionextUpgrade kernel-rt-vdsoUpgrade ocfs2-kmp-64kbUpgrade gfs2-kmp-azureUpgrade kernel-64kbUpgrade kernel-sourceUpgrade dtb-hisiliconUpgrade dtb-lgUpgrade kernel-debug-develUpgrade kernel-64kb-optionalUpgrade dlm-kmp-64kbUpgrade ocfs2-kmp-azureUpgrade kernel-azure-extraUpgrade kernel-source-vanillaUpgrade ocfs2-kmp-rtUpgrade kernel-rt-optionalUpgrade kernel-rt-develUpgrade dtb-nvidiaUpgrade dtb-xilinxUpgrade kernel-rtUpgrade gfs2-kmp-defaultUpgrade kernel-obs-qaUpgrade kernel-default-vdsoUpgrade kernel-default-base-rebuildUpgrade kernel-defaultUpgrade kernel-azure-develUpgrade kernel-macrosUpgrade kernel-devel-azureUpgrade kernel-obs-buildUpgrade dtb-apmUpgrade dtb-mediatekUpgrade cluster-md-kmp-rtUpgrade cluster-md-kmp-64kbUpgrade ocfs2-kmp-defaultUpgrade kselftests-kmp-rtUpgrade kernel-default-optionalUpgrade reiserfs-kmp-azureUpgrade kselftests-kmp-defaultUpgrade dtb-armUpgrade dtb-rockchipUpgrade dlm-kmp-rtUpgrade dlm-kmp-azureUpgrade cluster-md-kmp-defaultUpgrade kernel-rt-extraUpgrade kernel-devel-rtUpgrade kernel-develUpgrade kernel-syms-azureUpgrade dtb-qcomUpgrade kernel-docsUpgrade dtb-allwinnerUpgrade kernel-64kb-develUpgrade kernel-64kb-extraUpgrade dtb-sprdUpgrade kernel-debug-vdso | Dec 5, 2025 | Jun 12, 2025 |
| Ubuntu | — | Upgrade linux-image-virtual-6.8Upgrade linux-image-xilinx-6.8Upgrade linux-image-realtime-hwe-22.04Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-azure-6.8Upgrade linux-image-gcp-64k-6.8Upgrade linux-image-realtimeUpgrade linux-image-nvidia-64kUpgrade linux-image-oem-22.04bUpgrade linux-image-raspi-realtimeUpgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-6.14.0-1007-azureUpgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-nvidia-6.8Upgrade linux-image-aws-64k-6.8Upgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-generic-6.8Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-fips-6.8Upgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-6.14.0-1007-oracleUpgrade linux-image-intel-iotgUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-xilinxUpgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-gcp-fipsUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-oracle-6.8Upgrade linux-image-ibm-6.8Upgrade linux-image-raspi-6.8Upgrade linux-image-gcp-fips-6.8Upgrade linux-image-gke-6.8Upgrade linux-image-aws-lts-24.04Upgrade linux-image-6.14.0-1007-azure-fdeUpgrade linux-image-6.14.0-22-genericUpgrade linux-image-6.8.0-1046-awsUpgrade linux-image-6.14.0-1007-aws-64kUpgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-aws-6.8Upgrade linux-image-azure-fdeUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-aws-fips-6.8Upgrade linux-image-gcpUpgrade linux-image-generic-64k-6.8Upgrade linux-image-gke-64k-6.8Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-awsUpgrade linux-image-gcp-64kUpgrade linux-image-aws-64kUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-realtime-6.8.1Upgrade linux-image-oracle-64kUpgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-kvmUpgrade linux-image-azure-fipsUpgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-oem-22.04dUpgrade linux-image-gke-64kUpgrade linux-image-oem-22.04cUpgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-azureUpgrade linux-image-raspiUpgrade linux-image-azure-fips-6.8Upgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-6.14.0-1007-raspiUpgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-oracleUpgrade linux-image-nvidiaUpgrade linux-image-aws-fipsUpgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-raspi-realtime-6.8Upgrade linux-image-6.14.0-22-generic-64kUpgrade linux-image-lowlatency-6.8Upgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-generic-64kUpgrade linux-image-6.14.0-1008-gcpUpgrade linux-image-6.8.0-100-genericUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-ibmUpgrade linux-image-azure-lts-24.04Upgrade linux-image-6.14.0-1007-oracle-64kUpgrade linux-image-virtualUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-ibm-classicUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-6.8.0-1051-azureUpgrade linux-image-6.14.0-1007-awsUpgrade linux-image-oem-22.04aUpgrade linux-image-lowlatency-64kUpgrade linux-image-lowlatencyUpgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-6.14.0-1004-realtimeUpgrade linux-image-fipsUpgrade linux-image-genericUpgrade linux-image-gcp-6.8Upgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-generic-lpaeUpgrade linux-image-6.8.0-100-fipsUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-6.14.0-1008-gcp-64kUpgrade linux-image-6.8.0-1046-azureUpgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-gkeUpgrade linux-image-oem-22.04Upgrade linux-image-gkeop-6.8Upgrade linux-image-gkeop | Jun 26, 2025 | May 9, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jul 2, 2025 | May 9, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub