In the Linux kernel, the following vulnerability has been resolved:
nvmet-tcp: don't restore null sk_state_change
queue->state_change is set as part of nvmet_tcp_set_queue_sock(), but if the TCP connection isn't established when nvmet_tcp_set_queue_sock() is called then queue->state_change isn't set and sock->sk->sk_state_change isn't replaced.
As such we don't need to restore sock->sk->sk_state_change if queue->state_change is NULL.
This avoids NULL pointer dereferences such as this:
[ 286.462026][ C0] BUG: kernel NULL pointer dereference, address: 0000000000000000 [ 286.462814][ C0] #PF: supervisor instruction fetch in kernel mode [ 286.463796][ C0] #PF: error_code(0x0010) - not-present page [ 286.464392][ C0] PGD 8000000140620067 P4D 8000000140620067 PUD 114201067 PMD 0 [ 286.465086][ C0] Oops: Oops: 0010 [#1] SMP KASAN PTI [ 286.465559][ C0] CPU: 0 UID: 0 PID: 1628 Comm: nvme Not tainted 6.15.0-rc2+ #11 PREEMPT(voluntary) [ 286.466393][ C0] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.16.3-3.fc41 04/01/2014 [ 286.467147][ C0] RIP: 0010:0x0 [ 286.467420][ C0] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 286.467977][ C0] RSP: 0018:ffff8883ae008580 EFLAGS: 00010246 [ 286.468425][ C0] RAX: 0000000000000000 RBX: ffff88813fd34100 RCX: ffffffffa386cc43 [ 286.469019][ C0] RDX: 1ffff11027fa68b6 RSI: 0000000000000008 RDI: ffff88813fd34100 [ 286.469545][ C0] RBP: ffff88813fd34160 R08: 0000000000000000 R09: ffffed1027fa682c [ 286.470072][ C0] R10: ffff88813fd34167 R11: 0000000000000000 R12: ffff88813fd344c3 [ 286.470585][ C0] R13: ffff88813fd34112 R14: ffff88813fd34aec R15: ffff888132cdd268 [ 286.471070][ C0] FS: 00007fe3c04c7d80(0000) GS:ffff88840743f000(0000) knlGS:0000000000000000 [ 286.471644][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 286.472543][ C0] CR2: ffffffffffffffd6 CR3: 000000012daca000 CR4: 00000000000006f0 [ 286.473500][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 286.474467][ C0] DR3: 0000000000000000 DR6: 00000000ffff07f0 DR7: 0000000000000400 [ 286.475453][ C0] Call Trace: [ 286.476102][ C0] <IRQ> [ 286.476719][ C0] tcp_fin+0x2bb/0x440 [ 286.477429][ C0] tcp_data_queue+0x190f/0x4e60 [ 286.478174][ C0] ? __build_skb_around+0x234/0x330 [ 286.478940][ C0] ? rcu_is_watching+0x11/0xb0 [ 286.479659][ C0] ? __pfx_tcp_data_queue+0x10/0x10 [ 286.480431][ C0] ? tcp_try_undo_loss+0x640/0x6c0 [ 286.481196][ C0] ? seqcount_lockdep_reader_access.constprop.0+0x82/0x90 [ 286.482046][ C0] ? kvm_clock_get_cycles+0x14/0x30 [ 286.482769][ C0] ? ktime_get+0x66/0x150 [ 286.483433][ C0] ? rcu_is_watching+0x11/0xb0 [ 286.484146][ C0] tcp_rcv_established+0x6e4/0x2050 [ 286.484857][ C0] ? rcu_is_watching+0x11/0xb0 [ 286.485523][ C0] ? ipv4_dst_check+0x160/0x2b0 [ 286.486203][ C0] ? __pfx_tcp_rcv_established+0x10/0x10 [ 286.486917][ C0] ? lock_release+0x217/0x2c0 [ 286.487595][ C0] tcp_v4_do_rcv+0x4d6/0x9b0 [ 286.488279][ C0] tcp_v4_rcv+0x2af8/0x3e30 [ 286.488904][ C0] ? raw_local_deliver+0x51b/0xad0 [ 286.489551][ C0] ? rcu_is_watching+0x11/0xb0 [ 286.490198][ C0] ? __pfx_tcp_v4_rcv+0x10/0x10 [ 286.490813][ C0] ? __pfx_raw_local_deliver+0x10/0x10 [ 286.491487][ C0] ? __pfx_nf_confirm+0x10/0x10 [nf_conntrack] [ 286.492275][ C0] ? rcu_is_watching+0x11/0xb0 [ 286.492900][ C0] ip_protocol_deliver_rcu+0x8f/0x370 [ 286.493579][ C0] ip_local_deliver_finish+0x297/0x420 [ 286.494268][ C0] ip_local_deliver+0x168/0x430 [ 286.494867][ C0] ? __pfx_ip_local_deliver+0x10/0x10 [ 286.495498][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 286.496204][ C0] ? ip_rcv_finish_core+0x19a/0x1f20 [ 286.496806][ C0] ? lock_release+0x217/0x2c0 [ 286.497414][ C0] ip_rcv+0x455/0x6e0 [ 286.497945][ C0] ? __pfx_ip_rcv+0x10/0x10 [ ---truncated---
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Jun 20, 2025 | Jun 18, 2025 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-toolsUpgrade python3-perfUpgrade kernelUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libs | Sep 15, 2025 | Sep 9, 2025 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernelUpgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade kernel-tools-libsUpgrade bpftool | Dec 12, 2025 | Sep 9, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernelUpgrade kernel-tools-libsUpgrade bpftoolUpgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade python3-perf | Nov 12, 2025 | Sep 9, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade kernel-toolsUpgrade bpftoolUpgrade kernelUpgrade kernel-tools-libs | Nov 21, 2025 | Sep 9, 2025 |
| Oracle_linux | — | Upgrade kernel-uek | Aug 12, 2025 | Jun 18, 2025 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jun 18, 2025 |
| Suse | — | Upgrade kernel-debugUpgrade kernel-rt-develUpgrade gfs2-kmp-azureUpgrade kernel-source-azureUpgrade kernel-source-vanillaUpgrade dtb-renesasUpgrade kernel-sourceUpgrade kernel-rt_debug-develUpgrade dtb-mediatekUpgrade dtb-lgUpgrade kernel-64kb-develUpgrade dlm-kmp-64kbUpgrade kernel-64kb-optionalUpgrade dtb-xilinxUpgrade gfs2-kmp-defaultUpgrade kernel-default-develUpgrade kernel-rt-extraUpgrade dtb-qcomUpgrade dtb-sprdUpgrade kernel-default-vdsoUpgrade kernel-rt-optionalUpgrade kernel-default-livepatch-develUpgrade kselftests-kmp-64kbUpgrade dtb-amazonUpgrade kernel-64kb-extraUpgrade ocfs2-kmp-defaultUpgrade dtb-rockchipUpgrade ocfs2-kmp-64kbUpgrade kernel-source-rtUpgrade dtb-alteraUpgrade kernel-azureUpgrade kernel-default-livepatchUpgrade dtb-allwinnerUpgrade kselftests-kmp-azureUpgrade ocfs2-kmp-azureUpgrade cluster-md-kmp-64kbUpgrade reiserfs-kmp-azureUpgrade kernel-64kbUpgrade kernel-develUpgrade kernel-debug-develUpgrade reiserfs-kmp-64kbUpgrade dtb-exynosUpgrade kernel-devel-rtUpgrade kernel-obs-buildUpgrade kernel-default-optionalUpgrade dtb-hisiliconUpgrade kernel-azure-optionalUpgrade kernel-debug-vdsoUpgrade kernel-default-base-rebuildUpgrade dlm-kmp-rtUpgrade cluster-md-kmp-rtUpgrade reiserfs-kmp-defaultUpgrade dtb-caviumUpgrade dtb-freescaleUpgrade kernel-rt_debug-vdsoUpgrade dtb-appleUpgrade kernel-rt-vdsoUpgrade kernel-rtUpgrade kernel-macrosUpgrade dtb-amlogicUpgrade dlm-kmp-azureUpgrade dtb-broadcomUpgrade kernel-devel-azureUpgrade dtb-socionextUpgrade dtb-apmUpgrade dtb-amdUpgrade kernel-azure-extraUpgrade dlm-kmp-defaultUpgrade kernel-syms-rtUpgrade kernel-obs-qaUpgrade kernel-kvmsmall-vdsoUpgrade kernel-defaultUpgrade kselftests-kmp-rtUpgrade kernel-syms-azureUpgrade dtb-nvidiaUpgrade kernel-zfcpdumpUpgrade dtb-armUpgrade ocfs2-kmp-rtUpgrade kselftests-kmp-defaultUpgrade kernel-docs-htmlUpgrade kernel-azure-develUpgrade gfs2-kmp-64kbUpgrade kernel-rt-livepatch-develUpgrade kernel-default-extraUpgrade cluster-md-kmp-defaultUpgrade kernel-default-manUpgrade kernel-default-baseUpgrade cluster-md-kmp-azureUpgrade dtb-marvellUpgrade kernel-symsUpgrade kernel-rt_debugUpgrade kernel-docsUpgrade kernel-kvmsmall-develUpgrade kernel-azure-vdsoUpgrade kernel-kvmsmallUpgrade reiserfs-kmp-rtUpgrade gfs2-kmp-rt | Dec 5, 2025 | Aug 18, 2025 |
| Ubuntu | — | Upgrade linux-image-5.15.0-1043-nvidia-tegra-rtUpgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-oracle-64k-6.14Upgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-oem-22.04aUpgrade linux-image-azure-fipsUpgrade linux-image-gke-6.8Upgrade linux-image-ibm-6.8Upgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-aws-lts-24.04Upgrade linux-image-fips-6.8Upgrade linux-image-generic-64k-6.8Upgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-gcp-6.8Upgrade linux-image-oracle-64kUpgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-oem-20.04cUpgrade linux-image-nvidia-tegra-igxUpgrade linux-image-virtual-6.14Upgrade linux-image-gcp-fips-6.8Upgrade linux-image-oem-24.04Upgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.14.0-32-genericUpgrade linux-image-awsUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-oem-24.04cUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-xilinxUpgrade linux-image-oem-24.04aUpgrade linux-image-aws-64kUpgrade linux-image-oracleUpgrade linux-image-realtime-hwe-22.04Upgrade linux-image-realtime-5.15Upgrade linux-image-6.8.0-100-fipsUpgrade linux-image-6.8.0-100-genericUpgrade linux-image-oem-22.04cUpgrade linux-image-nvidia-64kUpgrade linux-image-aws-lts-22.04Upgrade linux-image-azure-lts-24.04Upgrade linux-image-generic-6.8Upgrade linux-image-azure-6.8Upgrade linux-image-5.15.0-1084-raspiUpgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-aws-64k-6.8Upgrade linux-image-5.15.0-1090-gcpUpgrade linux-image-kvmUpgrade linux-image-virtualUpgrade linux-image-5.15.0-1094-azureUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-6.14.0-1012-oemUpgrade linux-image-gcp-5.15Upgrade linux-image-ibmUpgrade linux-image-raspi-realtimeUpgrade linux-image-6.14.0-1013-oracleUpgrade linux-image-oem-20.04dUpgrade linux-image-oem-24.04bUpgrade linux-image-intel-iotgUpgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-gcpUpgrade linux-image-5.15.0-1032-nvidia-tegra-igxUpgrade linux-image-6.14.0-32-generic-64kUpgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-5.15.0-1094-azure-fipsUpgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-6.14.0-1012-realtimeUpgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-5.15.0-1043-nvidia-tegraUpgrade linux-image-aws-fips-6.8Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-gcp-6.14Upgrade linux-image-ibm-classicUpgrade linux-image-raspi-5.15Upgrade linux-image-5.15.0-1083-intel-iot-realtimeUpgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-nvidia-5.15Upgrade linux-image-oem-22.04bUpgrade linux-image-intelUpgrade linux-image-gkeop-6.8Upgrade linux-image-gke-5.15Upgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-lowlatencyUpgrade linux-image-oem-6.14Upgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-fips-5.15Upgrade linux-image-5.15.0-1085-nvidiaUpgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-azure-cvmUpgrade linux-image-5.15.0-152-lowlatencyUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-intel-iot-realtimeUpgrade linux-image-azure-fips-6.8Upgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-5.15.0-1086-kvmUpgrade linux-image-6.14.0-1016-gcp-64kUpgrade linux-image-aws-64k-6.14Upgrade linux-image-5.15.0-1087-gkeUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-xilinx-6.8Upgrade linux-image-realtime-hwe-24.04Upgrade linux-image-5.15.0-1090-awsUpgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-genericUpgrade linux-image-azure-fips-5.15Upgrade linux-image-6.14.0-1012-azureUpgrade linux-image-5.15.0-152-genericUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-5.15.0-1088-oracleUpgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-6.14.0-1016-gcpUpgrade linux-image-lowlatency-5.15Upgrade linux-image-aws-5.15Upgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-6.8.0-1046-azureUpgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-6.14.0-1013-oracle-64kUpgrade linux-image-5.15.0-1090-realtimeUpgrade linux-image-5.15.0-1083-ibmUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-nvidia-tegraUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-nvidia-6.8Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-aws-6.14Upgrade linux-image-6.8.0-1051-azureUpgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-aws-6.8Upgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-oem-22.04dUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-5.15.0-1073-gkeopUpgrade linux-image-lowlatency-6.8Upgrade linux-image-generic-64k-6.14Upgrade linux-image-5.15.0-1090-gcp-fipsUpgrade linux-image-gcp-64k-6.14Upgrade linux-image-6.14.0-1013-aws-64kUpgrade linux-image-raspi-6.8Upgrade linux-image-5.15.0-152-fipsUpgrade linux-image-oem-20.04Upgrade linux-image-5.15.0-152-lowlatency-64kUpgrade linux-image-5.15.0-1090-aws-fipsUpgrade linux-image-oracle-6.8Upgrade linux-image-generic-lpae-5.15Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-virtual-5.15Upgrade linux-image-raspi-nolpaeUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-oem-22.04Upgrade linux-image-nvidia-tegra-rtUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-kvm-5.15Upgrade linux-image-generic-6.14Upgrade linux-image-azure-lts-22.04Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-aws-64k-5.15Upgrade linux-image-6.8.0-1046-awsUpgrade linux-image-5.15.0-152-generic-lpaeUpgrade linux-image-5.15.0-1085-intel-iotgUpgrade linux-image-5.15.0-1032-nvidia-tegra-igx-rtUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-oracle-6.14Upgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-ibm-5.15Upgrade linux-image-gke-64k-6.8Upgrade linux-image-gke-64kUpgrade linux-image-generic-64kUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-gcp-fipsUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-virtual-6.8Upgrade linux-image-realtimeUpgrade linux-image-5.15.0-1084-ibmUpgrade linux-image-realtime-6.14Upgrade linux-image-oracle-5.15Upgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-azure-6.14Upgrade linux-image-azure-5.15Upgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-5.15.0-1090-aws-64kUpgrade linux-image-intel-iotg-5.15Upgrade linux-image-aws-fips-5.15Upgrade linux-image-generic-lpaeUpgrade linux-image-gcp-64kUpgrade linux-image-oem-20.04bUpgrade linux-image-6.14.0-1013-awsUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-gkeopUpgrade linux-image-raspiUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-gkeUpgrade linux-image-aws-fipsUpgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-5.15.0-1054-xilinx-zynqmpUpgrade linux-image-realtime-6.8.1Upgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-5.15.0-152-generic-64kUpgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-gcp-fips-5.15Upgrade linux-image-fipsUpgrade linux-image-azureUpgrade linux-image-nvidiaUpgrade linux-image-raspi-6.14Upgrade linux-image-6.14.0-1014-raspiUpgrade linux-image-generic-64k-5.15Upgrade linux-image-generic-5.15Upgrade linux-image-gkeop-5.15Upgrade linux-image-5.15.0-1085-nvidia-lowlatencyUpgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-gcp-64k-6.8 | Jun 26, 2025 | Jun 18, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 8, 2025 | Jun 18, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub