In the Linux kernel, the following vulnerability has been resolved:
net/tls: fix kernel panic when alloc_page failed
We cannot set frag_list to NULL pointer when alloc_page failed. It will be used in tls_strp_check_queue_ok when the next time tls_strp_read_sock is called.
This is because we don't reset full_len in tls_strp_flush_anchor_copy() so the recv path will try to continue handling the partial record on the next call but we dettached the rcvq from the frag list. Alternative fix would be to reset full_len.
Unable to handle kernel NULL pointer dereference at virtual address 0000000000000028 Call trace: tls_strp_check_rcv+0x128/0x27c tls_strp_data_ready+0x34/0x44 tls_data_ready+0x3c/0x1f0 tcp_data_ready+0x9c/0xe4 tcp_data_queue+0xf6c/0x12d0 tcp_rcv_established+0x52c/0x798
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade kernel-headersUpgrade kernel6.12-debuginfoUpgrade kernel6.12-debuginfo-common-aarch64Upgrade perf-debuginfoUpgrade perf6.12-debuginfoUpgrade python3-perfUpgrade perfUpgrade kernel-toolsUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-develUpgrade kernel6.12-modules-extraUpgrade kernel-modules-extra-commonUpgrade python3-perf6.12-debuginfoUpgrade kernel-libbpfUpgrade perf6.12Upgrade kernel-libbpf-develUpgrade kernelUpgrade kernel-develUpgrade kernel6.12Upgrade kernel-debuginfoUpgrade bpftool-debuginfoUpgrade kernel6.12-debuginfo-common-x86_64Upgrade kernel-livepatch-6.1.140-154.222Upgrade bpftoolUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-libbpf-staticUpgrade kernel-libbpf-debuginfoUpgrade kernel-modules-extraUpgrade kernel-livepatch-6.12.30-34.92Upgrade python3-perf6.12Upgrade python3-perf-debuginfo | Jul 11, 2025 | Jun 18, 2025 |
| Debian | — | Upgrade linux-6.1Upgrade linux | Jun 20, 2025 | Jun 18, 2025 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jun 18, 2025 |
| Suse | — | Upgrade kernel-64kbUpgrade dtb-allwinnerUpgrade dtb-caviumUpgrade dtb-mediatekUpgrade dlm-kmp-64kbUpgrade dtb-alteraUpgrade ocfs2-kmp-azureUpgrade kernel-source-azureUpgrade kselftests-kmp-azureUpgrade kernel-source-vanillaUpgrade dtb-lgUpgrade kernel-rt-develUpgrade kernel-azure-optionalUpgrade kernel-symsUpgrade ocfs2-kmp-defaultUpgrade dtb-rockchipUpgrade dtb-armUpgrade dtb-exynosUpgrade kernel-default-optionalUpgrade kernel-default-vdsoUpgrade dtb-sprdUpgrade gfs2-kmp-defaultUpgrade kernel-debugUpgrade kernel-debug-develUpgrade kernel-sourceUpgrade dtb-renesasUpgrade kernel-azureUpgrade kernel-64kb-extraUpgrade dtb-xilinxUpgrade kernel-default-develUpgrade dtb-hisiliconUpgrade kernel-default-base-rebuildUpgrade cluster-md-kmp-64kbUpgrade kernel-default-livepatch-develUpgrade kernel-64kb-optionalUpgrade kernel-devel-rtUpgrade kselftests-kmp-64kbUpgrade reiserfs-kmp-azureUpgrade dtb-qcomUpgrade kernel-debug-vdsoUpgrade cluster-md-kmp-rtUpgrade dlm-kmp-rtUpgrade reiserfs-kmp-defaultUpgrade gfs2-kmp-azureUpgrade kernel-rt_debug-develUpgrade kernel-64kb-develUpgrade kernel-develUpgrade dtb-apmUpgrade dtb-amazonUpgrade dtb-freescaleUpgrade kernel-obs-buildUpgrade kernel-rt-extraUpgrade reiserfs-kmp-64kbUpgrade kernel-azure-vdsoUpgrade ocfs2-kmp-rtUpgrade kernel-obs-qaUpgrade kernel-rt-livepatch-develUpgrade kernel-rt_debug-vdsoUpgrade kernel-default-baseUpgrade kernel-devel-azureUpgrade dtb-nvidiaUpgrade kernel-rt-optionalUpgrade dlm-kmp-azureUpgrade ocfs2-kmp-64kbUpgrade kselftests-kmp-defaultUpgrade kernel-azure-extraUpgrade kernel-azure-develUpgrade reiserfs-kmp-rtUpgrade kselftests-kmp-rtUpgrade dtb-marvellUpgrade kernel-syms-azureUpgrade kernel-source-rtUpgrade gfs2-kmp-rtUpgrade kernel-rtUpgrade cluster-md-kmp-azureUpgrade kernel-syms-rtUpgrade kernel-docsUpgrade kernel-default-livepatchUpgrade kernel-default-extraUpgrade dtb-appleUpgrade kernel-kvmsmallUpgrade dtb-broadcomUpgrade kernel-defaultUpgrade dtb-socionextUpgrade kernel-zfcpdumpUpgrade kernel-rt-vdsoUpgrade kernel-kvmsmall-vdsoUpgrade kernel-kvmsmall-develUpgrade kernel-docs-htmlUpgrade gfs2-kmp-64kbUpgrade dtb-amdUpgrade kernel-rt_debugUpgrade kernel-macrosUpgrade dlm-kmp-defaultUpgrade dtb-amlogicUpgrade cluster-md-kmp-default | Dec 5, 2025 | Jul 8, 2025 |
| Ubuntu | — | Upgrade linux-image-generic-6.8Upgrade linux-image-generic-lpaeUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-oem-22.04cUpgrade linux-image-azure-fipsUpgrade linux-image-fips-6.8Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-azureUpgrade linux-image-ibmUpgrade linux-image-oem-22.04bUpgrade linux-image-oem-6.14Upgrade linux-image-oracle-64k-6.14Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-gcp-fipsUpgrade linux-image-gcp-fips-6.8Upgrade linux-image-6.14.0-1011-oracle-64kUpgrade linux-image-6.8.0-1046-azureUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-6.8.0-1046-awsUpgrade linux-image-gkeopUpgrade linux-image-azure-fips-6.8Upgrade linux-image-6.14.0-1010-oemUpgrade linux-image-raspi-realtimeUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-lowlatency-64kUpgrade linux-image-oem-22.04Upgrade linux-image-oem-24.04aUpgrade linux-image-6.14.0-1010-azureUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-genericUpgrade linux-image-gcpUpgrade linux-image-gke-64kUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-oem-22.04aUpgrade linux-image-6.8.0-1051-azureUpgrade linux-image-oracle-64kUpgrade linux-image-raspi-6.14Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-6.14.0-1014-gcp-64kUpgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-xilinxUpgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-6.14.0-1011-awsUpgrade linux-image-generic-64k-6.8Upgrade linux-image-nvidiaUpgrade linux-image-fipsUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-6.14.0-1012-raspiUpgrade linux-image-ibm-6.8Upgrade linux-image-raspiUpgrade linux-image-aws-64k-6.8Upgrade linux-image-6.8.0-100-genericUpgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-lowlatencyUpgrade linux-image-ibm-classicUpgrade linux-image-realtime-hwe-22.04Upgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-aws-6.8Upgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-azure-lts-24.04Upgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-gkeop-6.8Upgrade linux-image-generic-64kUpgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-6.8.0-100-fipsUpgrade linux-image-gcp-64k-6.14Upgrade linux-image-6.14.0-1011-oracleUpgrade linux-image-6.14.0-28-genericUpgrade linux-image-oracle-6.8Upgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-aws-64kUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-6.14.0-28-generic-64kUpgrade linux-image-generic-6.14Upgrade linux-image-6.14.0-1010-realtimeUpgrade linux-image-gkeUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-aws-fips-6.8Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-nvidia-64kUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-aws-fipsUpgrade linux-image-oem-24.04cUpgrade linux-image-raspi-6.8Upgrade linux-image-gke-6.8Upgrade linux-image-azure-6.8Upgrade linux-image-virtual-6.8Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-realtime-6.14Upgrade linux-image-aws-lts-24.04Upgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-6.14.0-1014-gcpUpgrade linux-image-gcp-64kUpgrade linux-image-intel-iotgUpgrade linux-image-oem-24.04Upgrade linux-image-virtualUpgrade linux-image-gcp-6.8Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-6.14.0-1011-aws-64kUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-gcp-64k-6.8Upgrade linux-image-aws-6.14Upgrade linux-image-awsUpgrade linux-image-xilinx-6.8Upgrade linux-image-virtual-6.14Upgrade linux-image-oracle-6.14Upgrade linux-image-nvidia-6.8Upgrade linux-image-lowlatency-6.8Upgrade linux-image-generic-64k-6.14Upgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-realtimeUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-kvmUpgrade linux-image-gke-64k-6.8Upgrade linux-image-aws-64k-6.14Upgrade linux-image-azure-6.14Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-oem-22.04dUpgrade linux-image-realtime-6.8.1Upgrade linux-image-gcp-6.14Upgrade linux-image-oracleUpgrade linux-image-intel-iot-realtime | Jun 26, 2025 | Jun 18, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 8, 2025 | Jun 18, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub