In the Linux kernel, the following vulnerability has been resolved:
net/tls: fix kernel panic when alloc_page failed
We cannot set frag_list to NULL pointer when alloc_page failed. It will be used in tls_strp_check_queue_ok when the next time tls_strp_read_sock is called.
This is because we don't reset full_len in tls_strp_flush_anchor_copy() so the recv path will try to continue handling the partial record on the next call but we dettached the rcvq from the frag list. Alternative fix would be to reset full_len.
Unable to handle kernel NULL pointer dereference at virtual address 0000000000000028 Call trace: tls_strp_check_rcv+0x128/0x27c tls_strp_data_ready+0x34/0x44 tls_data_ready+0x3c/0x1f0 tcp_data_ready+0x9c/0xe4 tcp_data_queue+0xf6c/0x12d0 tcp_rcv_established+0x52c/0x798
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade kernel-libbpf-debuginfoUpgrade kernel-modules-extraUpgrade kernel-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-libbpfUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade kernel-develUpgrade kernel6.12Upgrade kernel-tools-debuginfoUpgrade kernel-livepatch-6.12.30-34.92Upgrade kernel6.12-debuginfo-common-x86_64Upgrade python3-perf-debuginfoUpgrade python3-perf6.12Upgrade perf6.12Upgrade bpftoolUpgrade kernel-libbpf-develUpgrade kernel-libbpf-staticUpgrade kernel-livepatch-6.1.140-154.222Upgrade kernel6.12-debuginfoUpgrade kernel-tools-develUpgrade kernel6.12-modules-extraUpgrade kernel-headersUpgrade python3-perf6.12-debuginfoUpgrade kernel6.12-debuginfo-common-aarch64Upgrade kernel-toolsUpgrade kernel-modules-extra-commonUpgrade kernel-debuginfo-common-aarch64Upgrade python3-perfUpgrade perfUpgrade perf6.12-debuginfoUpgrade perf-debuginfo | Jul 11, 2025 | Jun 18, 2025 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Jun 20, 2025 | Jun 18, 2025 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jun 18, 2025 |
| Suse | — | Upgrade kernel-64kbUpgrade ocfs2-kmp-azureUpgrade kernel-symsUpgrade dtb-caviumUpgrade kernel-azure-optionalUpgrade dlm-kmp-64kbUpgrade dtb-alteraUpgrade dtb-lgUpgrade dtb-allwinnerUpgrade kernel-rt_debug-develUpgrade kernel-source-azureUpgrade gfs2-kmp-defaultUpgrade kernel-debugUpgrade kernel-debug-develUpgrade dtb-sprdUpgrade kernel-default-optionalUpgrade kernel-default-livepatch-develUpgrade kernel-devel-rtUpgrade dtb-qcomUpgrade cluster-md-kmp-64kbUpgrade kernel-default-vdsoUpgrade dtb-exynosUpgrade kselftests-kmp-64kbUpgrade kernel-azureUpgrade kernel-sourceUpgrade dtb-renesasUpgrade dtb-armUpgrade kernel-default-base-rebuildUpgrade gfs2-kmp-azureUpgrade dlm-kmp-rtUpgrade ocfs2-kmp-defaultUpgrade dtb-hisiliconUpgrade reiserfs-kmp-defaultUpgrade kernel-64kb-optionalUpgrade reiserfs-kmp-azureUpgrade kernel-debug-vdsoUpgrade kernel-64kb-develUpgrade kernel-default-develUpgrade kernel-develUpgrade cluster-md-kmp-rtUpgrade kernel-rt-develUpgrade dtb-xilinxUpgrade kernel-source-vanillaUpgrade kernel-64kb-extraUpgrade kselftests-kmp-azureUpgrade dtb-mediatekUpgrade dtb-rockchipUpgrade kernel-macrosUpgrade kernel-obs-buildUpgrade kernel-rt_debugUpgrade kernel-syms-azureUpgrade kernel-source-rtUpgrade kernel-rt-extraUpgrade gfs2-kmp-rtUpgrade kernel-default-livepatchUpgrade kernel-default-extraUpgrade dtb-broadcomUpgrade dtb-appleUpgrade cluster-md-kmp-azureUpgrade dlm-kmp-defaultUpgrade kernel-azure-develUpgrade dtb-marvellUpgrade reiserfs-kmp-rtUpgrade ocfs2-kmp-64kbUpgrade kselftests-kmp-rtUpgrade kselftests-kmp-defaultUpgrade kernel-rt-optionalUpgrade dlm-kmp-azureUpgrade kernel-azure-extraUpgrade kernel-zfcpdumpUpgrade kernel-docs-htmlUpgrade dtb-amazonUpgrade ocfs2-kmp-rtUpgrade kernel-rt_debug-vdsoUpgrade kernel-obs-qaUpgrade kernel-devel-azureUpgrade kernel-default-baseUpgrade dtb-amlogicUpgrade gfs2-kmp-64kbUpgrade dtb-socionextUpgrade kernel-rt-vdsoUpgrade kernel-kvmsmall-vdsoUpgrade kernel-kvmsmall-develUpgrade kernel-rt-livepatch-develUpgrade dtb-amdUpgrade dtb-nvidiaUpgrade dtb-freescaleUpgrade kernel-rtUpgrade dtb-apmUpgrade cluster-md-kmp-defaultUpgrade kernel-defaultUpgrade kernel-azure-vdsoUpgrade reiserfs-kmp-64kbUpgrade kernel-syms-rtUpgrade kernel-kvmsmallUpgrade kernel-docs | Dec 5, 2025 | Jul 8, 2025 |
| Ubuntu | — | Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-oracle-6.14Upgrade linux-image-virtual-6.14Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-awsUpgrade linux-image-gcp-64k-6.14Upgrade linux-image-6.14.0-1011-aws-64kUpgrade linux-image-gke-64k-6.8Upgrade linux-image-nvidia-6.8Upgrade linux-image-aws-64k-6.14Upgrade linux-image-gcp-64k-6.8Upgrade linux-image-virtualUpgrade linux-image-oem-22.04dUpgrade linux-image-kvmUpgrade linux-image-xilinx-6.8Upgrade linux-image-generic-6.14Upgrade linux-image-aws-fips-6.8Upgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-realtime-6.8.1Upgrade linux-image-gcp-64kUpgrade linux-image-aws-6.14Upgrade linux-image-6.14.0-28-generic-64kUpgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-6.14.0-28-genericUpgrade linux-image-aws-lts-24.04Upgrade linux-image-generic-64k-6.14Upgrade linux-image-6.14.0-1010-realtimeUpgrade linux-image-6.14.0-1011-oracleUpgrade linux-image-gkeUpgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-gcp-6.8Upgrade linux-image-realtimeUpgrade linux-image-raspi-6.8Upgrade linux-image-gke-6.8Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-aws-fipsUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-virtual-6.8Upgrade linux-image-realtime-6.14Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-azure-6.8Upgrade linux-image-nvidia-64kUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-oracle-6.8Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-gcp-6.14Upgrade linux-image-oem-24.04cUpgrade linux-image-lowlatency-6.8Upgrade linux-image-intel-iotgUpgrade linux-image-oem-24.04Upgrade linux-image-aws-64kUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-6.14.0-1014-gcpUpgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-azure-6.14Upgrade linux-image-intel-iot-realtimeUpgrade linux-image-oracleUpgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-xilinxUpgrade linux-image-6.8.0-100-genericUpgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-azureUpgrade linux-image-gkeop-6.8Upgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-generic-64k-6.8Upgrade linux-image-generic-6.8Upgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-6.14.0-1011-oracle-64kUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-ibmUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-azure-fipsUpgrade linux-image-generic-64kUpgrade linux-image-oem-22.04cUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-nvidiaUpgrade linux-image-gcp-fipsUpgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-6.14.0-1014-gcp-64kUpgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-fipsUpgrade linux-image-aws-64k-6.8Upgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-6.14.0-1012-raspiUpgrade linux-image-6.14.0-1011-awsUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-ibm-classicUpgrade linux-image-generic-lpaeUpgrade linux-image-6.8.0-1051-azureUpgrade linux-image-lowlatency-64kUpgrade linux-image-oem-22.04bUpgrade linux-image-oem-6.14Upgrade linux-image-azure-fips-6.8Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-oracle-64k-6.14Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-raspi-realtime-6.8Upgrade linux-image-raspiUpgrade linux-image-lowlatencyUpgrade linux-image-gcp-fips-6.8Upgrade linux-image-azure-lts-24.04Upgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-aws-6.8Upgrade linux-image-realtime-hwe-22.04Upgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-gkeopUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-6.8.0-1046-awsUpgrade linux-image-6.8.0-100-fipsUpgrade linux-image-6.14.0-1010-oemUpgrade linux-image-raspi-realtimeUpgrade linux-image-6.8.0-1046-azureUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-genericUpgrade linux-image-oem-24.04aUpgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-ibm-6.8Upgrade linux-image-fips-6.8Upgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-gcpUpgrade linux-image-oem-22.04aUpgrade linux-image-gke-64kUpgrade linux-image-6.14.0-1010-azureUpgrade linux-image-raspi-6.14Upgrade linux-image-oem-22.04Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-oracle-64kUpgrade linux-image-6.8.0-100-lowlatency-64k | Jun 26, 2025 | Jun 18, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 8, 2025 | Jun 18, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub