In the Linux kernel, the following vulnerability has been resolved:
net/tls: fix kernel panic when alloc_page failed
We cannot set frag_list to NULL pointer when alloc_page failed. It will be used in tls_strp_check_queue_ok when the next time tls_strp_read_sock is called.
This is because we don't reset full_len in tls_strp_flush_anchor_copy() so the recv path will try to continue handling the partial record on the next call but we dettached the rcvq from the frag list. Alternative fix would be to reset full_len.
Unable to handle kernel NULL pointer dereference at virtual address 0000000000000028 Call trace: tls_strp_check_rcv+0x128/0x27c tls_strp_data_ready+0x34/0x44 tls_data_ready+0x3c/0x1f0 tcp_data_ready+0x9c/0xe4 tcp_data_queue+0xf6c/0x12d0 tcp_rcv_established+0x52c/0x798
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade kernel6.12-modules-extraUpgrade kernel-headersUpgrade python3-perf6.12-debuginfoUpgrade kernel-modules-extra-commonUpgrade kernel-toolsUpgrade perf6.12-debuginfoUpgrade kernel6.12-debuginfo-common-aarch64Upgrade perf-debuginfoUpgrade python3-perfUpgrade kernel-debuginfo-common-aarch64Upgrade perfUpgrade kernel-tools-develUpgrade kernel6.12-debuginfoUpgrade kernel-modules-extraUpgrade perf6.12Upgrade python3-perf6.12Upgrade kernel-libbpf-staticUpgrade bpftoolUpgrade kernel-livepatch-6.1.140-154.222Upgrade kernel6.12-debuginfo-common-x86_64Upgrade kernel-libbpfUpgrade kernel-debuginfoUpgrade kernel-libbpf-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-libbpf-develUpgrade kernel-livepatch-6.12.30-34.92Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-debuginfoUpgrade python3-perf-debuginfoUpgrade kernel-develUpgrade kernelUpgrade kernel6.12 | Jul 11, 2025 | Jun 18, 2025 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Jun 20, 2025 | Jun 18, 2025 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jun 18, 2025 |
| Suse | — | Upgrade kernel-debug-develUpgrade dtb-allwinnerUpgrade dtb-mediatekUpgrade dtb-rockchipUpgrade gfs2-kmp-defaultUpgrade kernel-debugUpgrade kernel-rt_debug-develUpgrade kernel-source-azureUpgrade dtb-renesasUpgrade kernel-sourceUpgrade kernel-default-base-rebuildUpgrade kernel-default-develUpgrade kernel-64kb-optionalUpgrade kernel-debug-vdsoUpgrade dlm-kmp-rtUpgrade dtb-xilinxUpgrade gfs2-kmp-azureUpgrade reiserfs-kmp-azureUpgrade kernel-develUpgrade kselftests-kmp-64kbUpgrade reiserfs-kmp-defaultUpgrade ocfs2-kmp-azureUpgrade kernel-64kb-develUpgrade cluster-md-kmp-rtUpgrade kernel-default-livepatch-develUpgrade dtb-qcomUpgrade cluster-md-kmp-64kbUpgrade kernel-azureUpgrade kselftests-kmp-azureUpgrade ocfs2-kmp-defaultUpgrade kernel-devel-rtUpgrade dtb-caviumUpgrade kernel-default-optionalUpgrade kernel-default-vdsoUpgrade kernel-rt-develUpgrade kernel-source-vanillaUpgrade kernel-64kbUpgrade kernel-symsUpgrade dlm-kmp-64kbUpgrade kernel-azure-optionalUpgrade dtb-alteraUpgrade dtb-hisiliconUpgrade kernel-64kb-extraUpgrade dtb-armUpgrade dtb-exynosUpgrade dtb-lgUpgrade dtb-sprdUpgrade kernel-rt_debug-vdsoUpgrade kernel-rt-optionalUpgrade kernel-defaultUpgrade dlm-kmp-defaultUpgrade kernel-rt_debugUpgrade kernel-syms-azureUpgrade kernel-source-rtUpgrade kernel-obs-buildUpgrade gfs2-kmp-rtUpgrade cluster-md-kmp-defaultUpgrade kernel-azure-vdsoUpgrade dtb-freescaleUpgrade kernel-rt-extraUpgrade kernel-macrosUpgrade kernel-rtUpgrade dtb-amazonUpgrade kernel-obs-qaUpgrade kernel-devel-azureUpgrade kernel-default-baseUpgrade dtb-amlogicUpgrade dtb-marvellUpgrade dlm-kmp-azureUpgrade reiserfs-kmp-rtUpgrade ocfs2-kmp-64kbUpgrade kselftests-kmp-rtUpgrade kselftests-kmp-defaultUpgrade kernel-azure-extraUpgrade kernel-azure-develUpgrade kernel-rt-livepatch-develUpgrade dtb-nvidiaUpgrade ocfs2-kmp-rtUpgrade kernel-default-extraUpgrade dtb-appleUpgrade dtb-broadcomUpgrade kernel-docsUpgrade dtb-socionextUpgrade kernel-rt-vdsoUpgrade kernel-kvmsmall-vdsoUpgrade dtb-amdUpgrade kernel-docs-htmlUpgrade kernel-kvmsmall-develUpgrade gfs2-kmp-64kbUpgrade kernel-syms-rtUpgrade kernel-kvmsmallUpgrade cluster-md-kmp-azureUpgrade kernel-default-livepatchUpgrade kernel-zfcpdumpUpgrade reiserfs-kmp-64kbUpgrade dtb-apm | Dec 5, 2025 | Jul 8, 2025 |
| Ubuntu | — | Upgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-aws-64k-6.8Upgrade linux-image-azureUpgrade linux-image-fipsUpgrade linux-image-gcp-fipsUpgrade linux-image-6.14.0-1012-raspiUpgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-generic-64k-6.8Upgrade linux-image-nvidiaUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-oem-22.04cUpgrade linux-image-gkeop-6.8Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-ibm-6.8Upgrade linux-image-azure-fipsUpgrade linux-image-generic-64kUpgrade linux-image-ibmUpgrade linux-image-ibm-classicUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-generic-6.8Upgrade linux-image-6.14.0-1011-oracle-64kUpgrade linux-image-generic-lpaeUpgrade linux-image-realtime-hwe-22.04Upgrade linux-image-6.8.0-1051-azureUpgrade linux-image-oem-22.04bUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-aws-6.8Upgrade linux-image-gcp-fips-6.8Upgrade linux-image-fips-6.8Upgrade linux-image-raspi-realtime-6.8Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-azure-lts-24.04Upgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-oem-24.04aUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-lowlatency-64kUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-lowlatencyUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-6.14.0-1011-awsUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-raspi-6.14Upgrade linux-image-oracle-64kUpgrade linux-image-gke-64kUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-gcpUpgrade linux-image-oem-22.04Upgrade linux-image-raspiUpgrade linux-image-6.14.0-1010-azureUpgrade linux-image-oem-22.04aUpgrade linux-image-azure-fips-6.8Upgrade linux-image-6.8.0-1046-awsUpgrade linux-image-genericUpgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-oracle-64k-6.14Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-xilinxUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-6.8.0-100-genericUpgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-oem-6.14Upgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-gkeopUpgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-6.14.0-1014-gcp-64kUpgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-6.8.0-1046-azureUpgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-6.14.0-1010-oemUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-6.8.0-100-fipsUpgrade linux-image-raspi-realtimeUpgrade linux-image-6.14.0-1010-realtimeUpgrade linux-image-gkeUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-generic-64k-6.14Upgrade linux-image-gcp-6.8Upgrade linux-image-lowlatency-6.8Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-virtual-6.14Upgrade linux-image-aws-fips-6.8Upgrade linux-image-raspi-6.8Upgrade linux-image-oem-24.04cUpgrade linux-image-gcp-6.14Upgrade linux-image-intel-iot-realtimeUpgrade linux-image-realtime-6.14Upgrade linux-image-oracleUpgrade linux-image-gke-6.8Upgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-azure-6.14Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-oracle-6.8Upgrade linux-image-azure-6.8Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-aws-fipsUpgrade linux-image-nvidia-64kUpgrade linux-image-virtual-6.8Upgrade linux-image-xilinx-6.8Upgrade linux-image-generic-6.14Upgrade linux-image-aws-lts-24.04Upgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-6.14.0-28-generic-64kUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-6.14.0-28-genericUpgrade linux-image-6.14.0-1011-oracleUpgrade linux-image-intel-iotgUpgrade linux-image-gcp-64kUpgrade linux-image-aws-64kUpgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-6.14.0-1014-gcpUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-virtualUpgrade linux-image-oem-24.04Upgrade linux-image-oem-22.04dUpgrade linux-image-kvmUpgrade linux-image-gke-64k-6.8Upgrade linux-image-aws-64k-6.14Upgrade linux-image-realtime-6.8.1Upgrade linux-image-aws-6.14Upgrade linux-image-awsUpgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-6.14.0-1011-aws-64kUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-gcp-64k-6.14Upgrade linux-image-nvidia-6.8Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-oracle-6.14Upgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-realtimeUpgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-6.8.0-1030-gkeop | Jun 26, 2025 | Jun 18, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 8, 2025 | Jun 18, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub