In the Linux kernel, the following vulnerability has been resolved:
net/tls: fix kernel panic when alloc_page failed
We cannot set frag_list to NULL pointer when alloc_page failed. It will be used in tls_strp_check_queue_ok when the next time tls_strp_read_sock is called.
This is because we don't reset full_len in tls_strp_flush_anchor_copy() so the recv path will try to continue handling the partial record on the next call but we dettached the rcvq from the frag list. Alternative fix would be to reset full_len.
Unable to handle kernel NULL pointer dereference at virtual address 0000000000000028 Call trace: tls_strp_check_rcv+0x128/0x27c tls_strp_data_ready+0x34/0x44 tls_data_ready+0x3c/0x1f0 tcp_data_ready+0x9c/0xe4 tcp_data_queue+0xf6c/0x12d0 tcp_rcv_established+0x52c/0x798
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade kernel-tools-develUpgrade kernel6.12-debuginfo-common-aarch64Upgrade kernel-modules-extra-commonUpgrade python3-perfUpgrade python3-perf6.12-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade perf6.12-debuginfoUpgrade kernel6.12-modules-extraUpgrade perf-debuginfoUpgrade kernel-toolsUpgrade perfUpgrade kernel6.12-debuginfoUpgrade kernel-headersUpgrade python3-perf6.12Upgrade kernel-libbpf-debuginfoUpgrade kernel-libbpfUpgrade kernel-modules-extraUpgrade python3-perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade perf6.12Upgrade kernel-libbpf-staticUpgrade bpftoolUpgrade bpftool-debuginfoUpgrade kernel-livepatch-6.1.140-154.222Upgrade kernel6.12-debuginfo-common-x86_64Upgrade kernel-livepatch-6.12.30-34.92Upgrade kernel-libbpf-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel6.12Upgrade kernel-develUpgrade kernelUpgrade kernel-debuginfo | Jul 11, 2025 | Jun 18, 2025 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Jun 20, 2025 | Jun 18, 2025 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jun 18, 2025 |
| Suse | — | Upgrade kernel-rt-extraUpgrade kernel-rtUpgrade gfs2-kmp-rtUpgrade kernel-obs-buildUpgrade reiserfs-kmp-64kbUpgrade kernel-syms-azureUpgrade dtb-freescaleUpgrade kernel-source-rtUpgrade dtb-apmUpgrade kernel-azure-vdsoUpgrade kernel-defaultUpgrade kernel-azure-extraUpgrade dtb-amazonUpgrade dlm-kmp-azureUpgrade dtb-marvellUpgrade kernel-azure-develUpgrade kernel-rt-optionalUpgrade kselftests-kmp-defaultUpgrade dtb-amlogicUpgrade kernel-default-baseUpgrade kernel-rt-livepatch-develUpgrade kernel-devel-azureUpgrade kernel-kvmsmall-vdsoUpgrade kernel-rt-vdsoUpgrade dtb-nvidiaUpgrade kernel-obs-qaUpgrade dtb-amdUpgrade gfs2-kmp-64kbUpgrade dtb-socionextUpgrade kernel-docs-htmlUpgrade kernel-default-livepatchUpgrade kernel-zfcpdumpUpgrade kernel-kvmsmall-develUpgrade kernel-rt_debug-vdsoUpgrade kernel-docsUpgrade kernel-kvmsmallUpgrade cluster-md-kmp-azureUpgrade dtb-appleUpgrade cluster-md-kmp-defaultUpgrade kernel-syms-rtUpgrade dtb-broadcomUpgrade kernel-default-extraUpgrade ocfs2-kmp-rtUpgrade kselftests-kmp-rtUpgrade ocfs2-kmp-64kbUpgrade reiserfs-kmp-rtUpgrade kernel-macrosUpgrade dlm-kmp-defaultUpgrade kernel-rt_debugUpgrade kselftests-kmp-azureUpgrade kernel-64kb-develUpgrade dtb-caviumUpgrade dtb-hisiliconUpgrade dtb-armUpgrade dtb-alteraUpgrade dlm-kmp-64kbUpgrade ocfs2-kmp-defaultUpgrade dtb-lgUpgrade kernel-source-vanillaUpgrade kernel-rt-develUpgrade kernel-default-vdsoUpgrade kernel-default-optionalUpgrade dtb-sprdUpgrade dtb-exynosUpgrade kernel-devel-rtUpgrade dtb-qcomUpgrade cluster-md-kmp-64kbUpgrade kernel-default-livepatch-develUpgrade kselftests-kmp-64kbUpgrade kernel-default-develUpgrade kernel-debug-vdsoUpgrade kernel-64kb-optionalUpgrade gfs2-kmp-azureUpgrade dtb-xilinxUpgrade dlm-kmp-rtUpgrade cluster-md-kmp-rtUpgrade reiserfs-kmp-defaultUpgrade reiserfs-kmp-azureUpgrade kernel-64kbUpgrade ocfs2-kmp-azureUpgrade kernel-develUpgrade dtb-allwinnerUpgrade kernel-rt_debug-develUpgrade kernel-source-azureUpgrade kernel-debug-develUpgrade kernel-debugUpgrade dtb-mediatekUpgrade gfs2-kmp-defaultUpgrade dtb-rockchipUpgrade kernel-azure-optionalUpgrade kernel-symsUpgrade dtb-renesasUpgrade kernel-sourceUpgrade kernel-default-base-rebuildUpgrade kernel-azureUpgrade kernel-64kb-extra | Dec 5, 2025 | Jul 8, 2025 |
| Ubuntu | — | Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-aws-fipsUpgrade linux-image-nvidia-64kUpgrade linux-image-realtime-6.14Upgrade linux-image-virtual-6.8Upgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-gcp-6.8Upgrade linux-image-lowlatency-6.8Upgrade linux-image-generic-64k-6.14Upgrade linux-image-aws-64kUpgrade linux-image-intel-iotgUpgrade linux-image-virtualUpgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-6.14.0-1014-gcpUpgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-gcp-64kUpgrade linux-image-oem-24.04Upgrade linux-image-realtime-6.8.1Upgrade linux-image-gke-64k-6.8Upgrade linux-image-oem-22.04dUpgrade linux-image-realtimeUpgrade linux-image-aws-fips-6.8Upgrade linux-image-kvmUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-raspi-6.8Upgrade linux-image-azure-6.14Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-oracleUpgrade linux-image-gcp-6.14Upgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-oracle-6.8Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-intel-iot-realtimeUpgrade linux-image-aws-lts-24.04Upgrade linux-image-generic-6.14Upgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-6.14.0-28-generic-64kUpgrade linux-image-gkeUpgrade linux-image-aws-64k-6.14Upgrade linux-image-oem-24.04cUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-gcp-64k-6.14Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-awsUpgrade linux-image-aws-6.14Upgrade linux-image-6.14.0-1010-realtimeUpgrade linux-image-virtual-6.14Upgrade linux-image-xilinx-6.8Upgrade linux-image-oracle-6.14Upgrade linux-image-6.14.0-1011-aws-64kUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-nvidia-6.8Upgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-6.14.0-1011-oracleUpgrade linux-image-6.14.0-28-genericUpgrade linux-image-gke-6.8Upgrade linux-image-azure-6.8Upgrade linux-image-fips-6.8Upgrade linux-image-raspiUpgrade linux-image-lowlatency-64kUpgrade linux-image-6.8.0-1051-azureUpgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-oem-24.04aUpgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-oem-22.04aUpgrade linux-image-xilinxUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-oracle-64k-6.8Upgrade linux-image-nvidiaUpgrade linux-image-generic-64k-6.8Upgrade linux-image-lowlatencyUpgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-realtime-hwe-22.04Upgrade linux-image-aws-6.8Upgrade linux-image-gcp-fips-6.8Upgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-genericUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-ibm-6.8Upgrade linux-image-aws-64k-6.8Upgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-6.14.0-1012-raspiUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-ibm-classicUpgrade linux-image-gkeop-6.8Upgrade linux-image-raspi-realtime-6.8Upgrade linux-image-azureUpgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-generic-64kUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-6.8.0-100-genericUpgrade linux-image-azure-lts-24.04Upgrade linux-image-fipsUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-generic-6.8Upgrade linux-image-generic-lpaeUpgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-6.14.0-1011-oracle-64kUpgrade linux-image-oem-22.04bUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-gke-64kUpgrade linux-image-gcpUpgrade linux-image-6.14.0-1010-azureUpgrade linux-image-raspi-6.14Upgrade linux-image-oracle-64kUpgrade linux-image-oem-22.04Upgrade linux-image-ibmUpgrade linux-image-oem-22.04cUpgrade linux-image-azure-fipsUpgrade linux-image-oem-6.14Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-gkeopUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-azure-fips-6.8Upgrade linux-image-6.8.0-1046-azureUpgrade linux-image-6.8.0-1046-awsUpgrade linux-image-6.8.0-100-fipsUpgrade linux-image-6.14.0-1010-oemUpgrade linux-image-raspi-realtimeUpgrade linux-image-oracle-64k-6.14Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-6.14.0-1011-awsUpgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-gcp-fipsUpgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-6.14.0-1014-gcp-64k | Jun 26, 2025 | Jun 18, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 8, 2025 | Jun 18, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub