In the Linux kernel, the following vulnerability has been resolved:
net/tls: fix kernel panic when alloc_page failed
We cannot set frag_list to NULL pointer when alloc_page failed. It will be used in tls_strp_check_queue_ok when the next time tls_strp_read_sock is called.
This is because we don't reset full_len in tls_strp_flush_anchor_copy() so the recv path will try to continue handling the partial record on the next call but we dettached the rcvq from the frag list. Alternative fix would be to reset full_len.
Unable to handle kernel NULL pointer dereference at virtual address 0000000000000028 Call trace: tls_strp_check_rcv+0x128/0x27c tls_strp_data_ready+0x34/0x44 tls_data_ready+0x3c/0x1f0 tcp_data_ready+0x9c/0xe4 tcp_data_queue+0xf6c/0x12d0 tcp_rcv_established+0x52c/0x798
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade python3-perf6.12-debuginfoUpgrade kernel6.12-debuginfoUpgrade perf-debuginfoUpgrade kernel-headersUpgrade kernel-tools-develUpgrade perf6.12-debuginfoUpgrade kernel6.12-debuginfo-common-aarch64Upgrade python3-perfUpgrade kernel-toolsUpgrade kernel-debuginfo-common-aarch64Upgrade kernel6.12-modules-extraUpgrade kernel-modules-extra-commonUpgrade perfUpgrade kernel-libbpf-develUpgrade python3-perf-debuginfoUpgrade kernel6.12-debuginfo-common-x86_64Upgrade kernel-libbpf-staticUpgrade bpftoolUpgrade kernel-livepatch-6.1.140-154.222Upgrade kernel-debuginfoUpgrade kernelUpgrade kernel6.12Upgrade kernel-develUpgrade bpftool-debuginfoUpgrade kernel-modules-extraUpgrade kernel-libbpf-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade perf6.12Upgrade python3-perf6.12Upgrade kernel-livepatch-6.12.30-34.92Upgrade kernel-libbpf | Jul 11, 2025 | Jun 18, 2025 |
| Debian | — | Upgrade linux-6.1Upgrade linux | Jun 20, 2025 | Jun 18, 2025 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jun 18, 2025 |
| Suse | — | Upgrade cluster-md-kmp-rtUpgrade kernel-64kbUpgrade ocfs2-kmp-azureUpgrade reiserfs-kmp-defaultUpgrade kselftests-kmp-64kbUpgrade dtb-caviumUpgrade reiserfs-kmp-azureUpgrade dlm-kmp-rtUpgrade dtb-xilinxUpgrade kernel-default-develUpgrade kernel-default-base-rebuildUpgrade kernel-sourceUpgrade dtb-hisiliconUpgrade kselftests-kmp-azureUpgrade dtb-exynosUpgrade dtb-renesasUpgrade dtb-mediatekUpgrade kernel-default-livepatch-develUpgrade dtb-allwinnerUpgrade dtb-qcomUpgrade kernel-debug-develUpgrade kernel-rt_debug-develUpgrade kernel-source-azureUpgrade kernel-devel-rtUpgrade dtb-alteraUpgrade kernel-debugUpgrade kernel-default-vdsoUpgrade dtb-rockchipUpgrade kernel-rt-develUpgrade kernel-default-optionalUpgrade gfs2-kmp-defaultUpgrade cluster-md-kmp-64kbUpgrade kernel-source-vanillaUpgrade ocfs2-kmp-defaultUpgrade dtb-sprdUpgrade dlm-kmp-64kbUpgrade kernel-64kb-optionalUpgrade kernel-develUpgrade kernel-debug-vdsoUpgrade dtb-armUpgrade kernel-azureUpgrade kernel-64kb-extraUpgrade gfs2-kmp-azureUpgrade dtb-lgUpgrade kernel-64kb-develUpgrade kernel-symsUpgrade kernel-azure-optionalUpgrade kernel-kvmsmall-vdsoUpgrade kernel-default-baseUpgrade kernel-docsUpgrade kernel-default-livepatchUpgrade kernel-default-extraUpgrade dtb-appleUpgrade cluster-md-kmp-azureUpgrade kernel-syms-rtUpgrade kernel-kvmsmallUpgrade dtb-broadcomUpgrade dlm-kmp-defaultUpgrade kernel-rt_debugUpgrade kernel-macrosUpgrade kernel-rt_debug-vdsoUpgrade kernel-rt-extraUpgrade gfs2-kmp-64kbUpgrade kernel-kvmsmall-develUpgrade kernel-docs-htmlUpgrade dtb-socionextUpgrade dtb-amdUpgrade kernel-zfcpdumpUpgrade kernel-rt-vdsoUpgrade dtb-apmUpgrade kernel-defaultUpgrade kernel-azure-vdsoUpgrade cluster-md-kmp-defaultUpgrade kselftests-kmp-defaultUpgrade dtb-marvellUpgrade reiserfs-kmp-rtUpgrade ocfs2-kmp-64kbUpgrade kselftests-kmp-rtUpgrade kernel-rt-optionalUpgrade kernel-azure-extraUpgrade kernel-azure-develUpgrade dlm-kmp-azureUpgrade reiserfs-kmp-64kbUpgrade kernel-rtUpgrade kernel-source-rtUpgrade dtb-freescaleUpgrade kernel-syms-azureUpgrade kernel-obs-buildUpgrade gfs2-kmp-rtUpgrade ocfs2-kmp-rtUpgrade dtb-amazonUpgrade kernel-rt-livepatch-develUpgrade kernel-obs-qaUpgrade dtb-amlogicUpgrade dtb-nvidiaUpgrade kernel-devel-azure | Dec 5, 2025 | Jul 8, 2025 |
| Ubuntu | — | Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-oracle-6.14Upgrade linux-image-6.14.0-1010-realtimeUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-nvidia-6.8Upgrade linux-image-6.14.0-1011-oracleUpgrade linux-image-6.14.0-28-genericUpgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-generic-6.14Upgrade linux-image-gkeUpgrade linux-image-virtual-6.14Upgrade linux-image-xilinx-6.8Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-6.14.0-1011-aws-64kUpgrade linux-image-aws-lts-24.04Upgrade linux-image-6.14.0-28-generic-64kUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-azure-6.14Upgrade linux-image-gcp-6.14Upgrade linux-image-oracleUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-nvidia-64kUpgrade linux-image-realtime-6.14Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-virtual-6.8Upgrade linux-image-aws-64k-6.14Upgrade linux-image-kvmUpgrade linux-image-aws-fipsUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-aws-fips-6.8Upgrade linux-image-realtime-6.8.1Upgrade linux-image-oracle-6.8Upgrade linux-image-awsUpgrade linux-image-aws-6.14Upgrade linux-image-gcp-64k-6.14Upgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-gke-6.8Upgrade linux-image-azure-6.8Upgrade linux-image-oem-24.04cUpgrade linux-image-raspi-6.8Upgrade linux-image-lowlatency-6.8Upgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-generic-64k-6.14Upgrade linux-image-realtimeUpgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-gcp-6.8Upgrade linux-image-gke-64k-6.8Upgrade linux-image-oem-24.04Upgrade linux-image-6.14.0-1014-gcpUpgrade linux-image-intel-iotgUpgrade linux-image-virtualUpgrade linux-image-gcp-64kUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-oem-22.04dUpgrade linux-image-aws-64kUpgrade linux-image-oem-22.04cUpgrade linux-image-generic-64kUpgrade linux-image-azure-fipsUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-generic-lpaeUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-ibmUpgrade linux-image-azure-fips-6.8Upgrade linux-image-6.8.0-1046-azureUpgrade linux-image-realtime-hwe-22.04Upgrade linux-image-raspi-6.14Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-xilinxUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-generic-64k-6.8Upgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-lowlatency-64kUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-oem-24.04aUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-6.8.0-1051-azureUpgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-nvidiaUpgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-6.14.0-1014-gcp-64kUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-gcp-fipsUpgrade linux-image-oracle-64k-6.14Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-oem-6.14Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-genericUpgrade linux-image-6.8.0-1046-awsUpgrade linux-image-6.14.0-1010-oemUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-azureUpgrade linux-image-gcpUpgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-6.8.0-100-fipsUpgrade linux-image-raspi-realtimeUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-oem-22.04aUpgrade linux-image-oem-22.04Upgrade linux-image-oracle-64kUpgrade linux-image-ibm-6.8Upgrade linux-image-6.14.0-1012-raspiUpgrade linux-image-gkeopUpgrade linux-image-raspiUpgrade linux-image-fips-6.8Upgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-azure-lts-24.04Upgrade linux-image-aws-6.8Upgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-6.8.0-100-genericUpgrade linux-image-lowlatencyUpgrade linux-image-gcp-fips-6.8Upgrade linux-image-fipsUpgrade linux-image-gkeop-6.8Upgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-aws-64k-6.8Upgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-ibm-classicUpgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-6.14.0-1011-awsUpgrade linux-image-6.14.0-1010-azureUpgrade linux-image-gke-64kUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-generic-6.8Upgrade linux-image-6.14.0-1011-oracle-64kUpgrade linux-image-oem-22.04b | Jun 26, 2025 | Jun 18, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 8, 2025 | Jun 18, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub