In the Linux kernel, the following vulnerability has been resolved:
net/tls: fix kernel panic when alloc_page failed
We cannot set frag_list to NULL pointer when alloc_page failed. It will be used in tls_strp_check_queue_ok when the next time tls_strp_read_sock is called.
This is because we don't reset full_len in tls_strp_flush_anchor_copy() so the recv path will try to continue handling the partial record on the next call but we dettached the rcvq from the frag list. Alternative fix would be to reset full_len.
Unable to handle kernel NULL pointer dereference at virtual address 0000000000000028 Call trace: tls_strp_check_rcv+0x128/0x27c tls_strp_data_ready+0x34/0x44 tls_data_ready+0x3c/0x1f0 tcp_data_ready+0x9c/0xe4 tcp_data_queue+0xf6c/0x12d0 tcp_rcv_established+0x52c/0x798
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade kernel-headersUpgrade perf6.12-debuginfoUpgrade kernel6.12-debuginfo-common-aarch64Upgrade kernel6.12-modules-extraUpgrade perf-debuginfoUpgrade python3-perfUpgrade kernel6.12-debuginfoUpgrade python3-perf6.12-debuginfoUpgrade kernel-modules-extra-commonUpgrade kernel-tools-develUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-toolsUpgrade perfUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-libbpf-develUpgrade kernel-debuginfoUpgrade kernel6.12Upgrade kernel-tools-debuginfoUpgrade kernel-libbpfUpgrade kernel-modules-extraUpgrade kernel-libbpf-debuginfoUpgrade kernel-livepatch-6.12.30-34.92Upgrade kernel-develUpgrade kernelUpgrade bpftool-debuginfoUpgrade kernel6.12-debuginfo-common-x86_64Upgrade kernel-livepatch-6.1.140-154.222Upgrade bpftoolUpgrade kernel-libbpf-staticUpgrade perf6.12Upgrade python3-perf6.12Upgrade python3-perf-debuginfo | Jul 11, 2025 | Jun 18, 2025 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Jun 20, 2025 | Jun 18, 2025 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jun 18, 2025 |
| Suse | — | Upgrade dtb-allwinnerUpgrade kernel-debugUpgrade gfs2-kmp-azureUpgrade kernel-debug-develUpgrade gfs2-kmp-defaultUpgrade kernel-rt_debug-develUpgrade kernel-source-azureUpgrade dtb-mediatekUpgrade dtb-rockchipUpgrade kernel-64kb-develUpgrade kernel-64kb-optionalUpgrade dtb-qcomUpgrade cluster-md-kmp-64kbUpgrade kernel-devel-rtUpgrade dtb-renesasUpgrade kernel-default-base-rebuildUpgrade kernel-default-livepatch-develUpgrade kernel-64kbUpgrade dtb-caviumUpgrade dtb-exynosUpgrade ocfs2-kmp-azureUpgrade dlm-kmp-64kbUpgrade dtb-armUpgrade kernel-sourceUpgrade kernel-azure-optionalUpgrade kernel-rt-develUpgrade kernel-64kb-extraUpgrade kernel-source-vanillaUpgrade dtb-alteraUpgrade dtb-hisiliconUpgrade kernel-symsUpgrade kselftests-kmp-azureUpgrade dtb-lgUpgrade dtb-sprdUpgrade kernel-default-optionalUpgrade kernel-default-vdsoUpgrade ocfs2-kmp-defaultUpgrade kselftests-kmp-64kbUpgrade reiserfs-kmp-azureUpgrade kernel-develUpgrade reiserfs-kmp-defaultUpgrade kernel-debug-vdsoUpgrade kernel-default-develUpgrade dlm-kmp-rtUpgrade dtb-xilinxUpgrade cluster-md-kmp-rtUpgrade kernel-azureUpgrade kernel-macrosUpgrade kernel-obs-buildUpgrade kernel-rt-optionalUpgrade kernel-azure-extraUpgrade kernel-azure-develUpgrade dtb-appleUpgrade kernel-kvmsmallUpgrade kernel-docsUpgrade kernel-default-livepatchUpgrade kernel-default-extraUpgrade cluster-md-kmp-defaultUpgrade kernel-defaultUpgrade dtb-apmUpgrade kernel-azure-vdsoUpgrade dtb-broadcomUpgrade dlm-kmp-defaultUpgrade kernel-rt_debugUpgrade kselftests-kmp-defaultUpgrade kernel-rt-vdsoUpgrade kernel-kvmsmall-develUpgrade kernel-docs-htmlUpgrade gfs2-kmp-64kbUpgrade dtb-socionextUpgrade dtb-amdUpgrade kernel-zfcpdumpUpgrade kernel-kvmsmall-vdsoUpgrade gfs2-kmp-rtUpgrade dtb-freescaleUpgrade kernel-syms-azureUpgrade kernel-rt-extraUpgrade kernel-source-rtUpgrade kernel-default-baseUpgrade dtb-amazonUpgrade ocfs2-kmp-rtUpgrade kernel-rt_debug-vdsoUpgrade kernel-rt-livepatch-develUpgrade kernel-obs-qaUpgrade kernel-devel-azureUpgrade dtb-nvidiaUpgrade dtb-amlogicUpgrade cluster-md-kmp-azureUpgrade kernel-rtUpgrade reiserfs-kmp-64kbUpgrade kernel-syms-rtUpgrade dtb-marvellUpgrade dlm-kmp-azureUpgrade reiserfs-kmp-rtUpgrade ocfs2-kmp-64kbUpgrade kselftests-kmp-rt | Dec 5, 2025 | Jul 8, 2025 |
| Ubuntu | — | Upgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-intel-iot-realtimeUpgrade linux-image-azure-6.14Upgrade linux-image-oracleUpgrade linux-image-oracle-6.8Upgrade linux-image-gke-64k-6.8Upgrade linux-image-gcp-6.14Upgrade linux-image-oem-22.04dUpgrade linux-image-raspi-6.8Upgrade linux-image-azure-6.8Upgrade linux-image-gke-6.8Upgrade linux-image-oem-24.04cUpgrade linux-image-oracle-6.14Upgrade linux-image-nvidia-6.8Upgrade linux-image-gkeUpgrade linux-image-aws-lts-24.04Upgrade linux-image-generic-6.14Upgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-6.14.0-1014-gcpUpgrade linux-image-6.14.0-28-genericUpgrade linux-image-6.14.0-28-generic-64kUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-gcp-64kUpgrade linux-image-virtualUpgrade linux-image-aws-64kUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-oem-24.04Upgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-intel-iotgUpgrade linux-image-6.14.0-1010-realtimeUpgrade linux-image-gcp-6.8Upgrade linux-image-generic-64k-6.14Upgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-lowlatency-6.8Upgrade linux-image-kvmUpgrade linux-image-aws-fips-6.8Upgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-realtimeUpgrade linux-image-virtual-6.14Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-aws-64k-6.14Upgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-realtime-6.8.1Upgrade linux-image-6.14.0-1011-oracleUpgrade linux-image-6.14.0-1011-aws-64kUpgrade linux-image-awsUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-gcp-64k-6.14Upgrade linux-image-nvidia-64kUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-virtual-6.8Upgrade linux-image-aws-6.14Upgrade linux-image-aws-fipsUpgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-xilinx-6.8Upgrade linux-image-realtime-6.14Upgrade linux-image-oem-22.04cUpgrade linux-image-generic-64kUpgrade linux-image-generic-lpaeUpgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-generic-64k-6.8Upgrade linux-image-ibm-6.8Upgrade linux-image-fipsUpgrade linux-image-azure-fipsUpgrade linux-image-gkeop-6.8Upgrade linux-image-fips-6.8Upgrade linux-image-azure-lts-24.04Upgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-aws-64k-6.8Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.14.0-1011-oracle-64kUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-generic-6.8Upgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-oem-22.04bUpgrade linux-image-gcp-fipsUpgrade linux-image-xilinxUpgrade linux-image-nvidiaUpgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-6.14.0-1014-gcp-64kUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-aws-6.8Upgrade linux-image-raspi-realtime-6.8Upgrade linux-image-raspiUpgrade linux-image-gcp-fips-6.8Upgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-6.14.0-1012-raspiUpgrade linux-image-6.14.0-1011-awsUpgrade linux-image-azureUpgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-oem-24.04aUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-lowlatency-64kUpgrade linux-image-6.8.0-1051-azureUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-ibmUpgrade linux-image-oem-22.04Upgrade linux-image-oracle-64kUpgrade linux-image-raspi-6.14Upgrade linux-image-oem-22.04aUpgrade linux-image-6.14.0-1010-azureUpgrade linux-image-gke-64kUpgrade linux-image-gcpUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-6.8.0-100-genericUpgrade linux-image-realtime-hwe-22.04Upgrade linux-image-genericUpgrade linux-image-6.8.0-1046-awsUpgrade linux-image-raspi-realtimeUpgrade linux-image-oracle-64k-6.14Upgrade linux-image-6.14.0-1010-oemUpgrade linux-image-oem-6.14Upgrade linux-image-6.8.0-100-fipsUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-azure-fips-6.8Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-lowlatencyUpgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-gkeopUpgrade linux-image-6.8.0-1046-azureUpgrade linux-image-ibm-classic | Jun 26, 2025 | Jun 18, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 8, 2025 | Jun 18, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub