In the Linux kernel, the following vulnerability has been resolved:
net/tls: fix kernel panic when alloc_page failed
We cannot set frag_list to NULL pointer when alloc_page failed. It will be used in tls_strp_check_queue_ok when the next time tls_strp_read_sock is called.
This is because we don't reset full_len in tls_strp_flush_anchor_copy() so the recv path will try to continue handling the partial record on the next call but we dettached the rcvq from the frag list. Alternative fix would be to reset full_len.
Unable to handle kernel NULL pointer dereference at virtual address 0000000000000028 Call trace: tls_strp_check_rcv+0x128/0x27c tls_strp_data_ready+0x34/0x44 tls_data_ready+0x3c/0x1f0 tcp_data_ready+0x9c/0xe4 tcp_data_queue+0xf6c/0x12d0 tcp_rcv_established+0x52c/0x798
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade kernel-tools-debuginfoUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade kernel-develUpgrade kernel-libbpf-develUpgrade kernel6.12Upgrade perf6.12Upgrade kernel6.12-debuginfo-common-x86_64Upgrade kernel-livepatch-6.1.140-154.222Upgrade kernel-libbpf-debuginfoUpgrade bpftoolUpgrade kernel-libbpf-staticUpgrade python3-perf-debuginfoUpgrade kernel-livepatch-6.12.30-34.92Upgrade python3-perf6.12Upgrade kernel-modules-extraUpgrade kernel-libbpfUpgrade bpftool-debuginfoUpgrade kernel-headersUpgrade kernel6.12-debuginfoUpgrade kernel6.12-modules-extraUpgrade perf-debuginfoUpgrade kernel6.12-debuginfo-common-aarch64Upgrade kernel-tools-develUpgrade perf6.12-debuginfoUpgrade python3-perf6.12-debuginfoUpgrade kernel-toolsUpgrade kernel-debuginfo-common-aarch64Upgrade python3-perfUpgrade perfUpgrade kernel-modules-extra-common | Jul 11, 2025 | Jun 18, 2025 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Jun 20, 2025 | Jun 18, 2025 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jun 18, 2025 |
| Suse | — | Upgrade kernel-sourceUpgrade kernel-symsUpgrade kernel-default-base-rebuildUpgrade dlm-kmp-64kbUpgrade dtb-armUpgrade cluster-md-kmp-rtUpgrade dlm-kmp-rtUpgrade dtb-caviumUpgrade dtb-xilinxUpgrade kernel-64kbUpgrade ocfs2-kmp-azureUpgrade gfs2-kmp-azureUpgrade kernel-rt-develUpgrade kernel-rt_debug-develUpgrade kernel-source-azureUpgrade kernel-64kb-develUpgrade kernel-devel-rtUpgrade kernel-default-livepatch-develUpgrade kernel-debug-vdsoUpgrade dtb-allwinnerUpgrade kernel-64kb-optionalUpgrade dtb-mediatekUpgrade kernel-develUpgrade kselftests-kmp-64kbUpgrade reiserfs-kmp-defaultUpgrade dtb-rockchipUpgrade kernel-azure-optionalUpgrade dtb-renesasUpgrade kernel-source-vanillaUpgrade reiserfs-kmp-azureUpgrade ocfs2-kmp-defaultUpgrade dtb-alteraUpgrade kernel-default-develUpgrade gfs2-kmp-defaultUpgrade dtb-lgUpgrade dtb-sprdUpgrade dtb-exynosUpgrade kernel-default-optionalUpgrade kernel-default-vdsoUpgrade kernel-debugUpgrade kselftests-kmp-azureUpgrade kernel-debug-develUpgrade kernel-64kb-extraUpgrade dtb-hisiliconUpgrade kernel-azureUpgrade cluster-md-kmp-64kbUpgrade dtb-qcomUpgrade dlm-kmp-defaultUpgrade kernel-macrosUpgrade kernel-rt_debugUpgrade kernel-rtUpgrade dtb-amazonUpgrade kernel-syms-azureUpgrade kernel-rt-extraUpgrade gfs2-kmp-rtUpgrade reiserfs-kmp-64kbUpgrade dtb-freescaleUpgrade kernel-obs-buildUpgrade kernel-docsUpgrade kernel-default-livepatchUpgrade dtb-socionextUpgrade kernel-kvmsmall-vdsoUpgrade dtb-amdUpgrade kernel-zfcpdumpUpgrade kernel-docs-htmlUpgrade gfs2-kmp-64kbUpgrade kernel-syms-rtUpgrade kernel-kvmsmallUpgrade kernel-default-extraUpgrade dtb-broadcomUpgrade cluster-md-kmp-azureUpgrade kernel-rt-vdsoUpgrade kernel-kvmsmall-develUpgrade dtb-appleUpgrade cluster-md-kmp-defaultUpgrade kernel-defaultUpgrade dtb-apmUpgrade kernel-azure-vdsoUpgrade kernel-azure-extraUpgrade kernel-azure-develUpgrade dtb-marvellUpgrade dlm-kmp-azureUpgrade reiserfs-kmp-rtUpgrade kselftests-kmp-rtUpgrade kselftests-kmp-defaultUpgrade kernel-rt-optionalUpgrade ocfs2-kmp-64kbUpgrade kernel-source-rtUpgrade ocfs2-kmp-rtUpgrade kernel-rt-livepatch-develUpgrade kernel-obs-qaUpgrade kernel-devel-azureUpgrade kernel-default-baseUpgrade dtb-nvidiaUpgrade dtb-amlogicUpgrade kernel-rt_debug-vdso | Dec 5, 2025 | Jul 8, 2025 |
| Ubuntu | — | Upgrade linux-image-lowlatency-6.8Upgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-generic-64k-6.14Upgrade linux-image-intel-iotgUpgrade linux-image-oracle-6.14Upgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-virtualUpgrade linux-image-aws-64kUpgrade linux-image-gcp-64kUpgrade linux-image-awsUpgrade linux-image-gcp-64k-6.14Upgrade linux-image-nvidia-6.8Upgrade linux-image-gcp-64k-6.8Upgrade linux-image-aws-6.14Upgrade linux-image-virtual-6.14Upgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.14.0-28-generic-64kUpgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-aws-lts-24.04Upgrade linux-image-6.14.0-1014-gcpUpgrade linux-image-gkeUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-gcp-6.8Upgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-6.14.0-28-genericUpgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-azure-6.8Upgrade linux-image-generic-6.14Upgrade linux-image-oem-24.04cUpgrade linux-image-oracle-6.8Upgrade linux-image-raspi-6.8Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-intel-iot-realtimeUpgrade linux-image-oracleUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-gcp-6.14Upgrade linux-image-gke-6.8Upgrade linux-image-6.14.0-1011-oracleUpgrade linux-image-xilinx-6.8Upgrade linux-image-oem-22.04dUpgrade linux-image-aws-64k-6.14Upgrade linux-image-kvmUpgrade linux-image-aws-fips-6.8Upgrade linux-image-realtime-6.14Upgrade linux-image-virtual-6.8Upgrade linux-image-gke-64k-6.8Upgrade linux-image-realtime-6.8.1Upgrade linux-image-aws-fipsUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-realtimeUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-6.14.0-1010-realtimeUpgrade linux-image-oem-24.04Upgrade linux-image-nvidia-64kUpgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-azure-6.14Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-6.14.0-1011-aws-64kUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-nvidiaUpgrade linux-image-raspi-6.14Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-gke-64kUpgrade linux-image-gcpUpgrade linux-image-aws-6.8Upgrade linux-image-6.8.0-100-genericUpgrade linux-image-oem-22.04Upgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-azure-lts-24.04Upgrade linux-image-oem-22.04cUpgrade linux-image-gkeop-6.8Upgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-gcp-fipsUpgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-6.14.0-1014-gcp-64kUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-ibm-classicUpgrade linux-image-ibm-6.8Upgrade linux-image-fipsUpgrade linux-image-azureUpgrade linux-image-aws-64k-6.8Upgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-6.14.0-1011-awsUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-genericUpgrade linux-image-gkeopUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-6.8.0-1046-azureUpgrade linux-image-6.8.0-100-fipsUpgrade linux-image-6.14.0-1010-oemUpgrade linux-image-raspi-realtimeUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-oracle-64k-6.14Upgrade linux-image-oem-6.14Upgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-generic-64k-6.8Upgrade linux-image-xilinxUpgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-generic-64kUpgrade linux-image-oem-24.04aUpgrade linux-image-lowlatency-64kUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-6.8.0-1051-azureUpgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-azure-fipsUpgrade linux-image-oem-22.04bUpgrade linux-image-generic-lpaeUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-generic-6.8Upgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-6.14.0-1011-oracle-64kUpgrade linux-image-raspiUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-fips-6.8Upgrade linux-image-realtime-hwe-22.04Upgrade linux-image-lowlatencyUpgrade linux-image-gcp-fips-6.8Upgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-oracle-64kUpgrade linux-image-ibmUpgrade linux-image-oem-22.04aUpgrade linux-image-6.14.0-1010-azureUpgrade linux-image-6.8.0-1046-awsUpgrade linux-image-azure-fips-6.8Upgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-6.14.0-1012-raspi | Jun 26, 2025 | Jun 18, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 8, 2025 | Jun 18, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub