In the Linux kernel, the following vulnerability has been resolved:
tls: always refresh the queue when reading sock
After recent changes in net-next TCP compacts skbs much more aggressively. This unearthed a bug in TLS where we may try to operate on an old skb when checking if all skbs in the queue have matching decrypt state and geometry.
BUG: KASAN: slab-use-after-free in tls_strp_check_rcv+0x898/0x9a0 [tls] (net/tls/tls_strp.c:436 net/tls/tls_strp.c:530 net/tls/tls_strp.c:544) Read of size 4 at addr ffff888013085750 by task tls/13529
CPU: 2 UID: 0 PID: 13529 Comm: tls Not tainted 6.16.0-rc5-virtme Call Trace: kasan_report+0xca/0x100 tls_strp_check_rcv+0x898/0x9a0 [tls] tls_rx_rec_wait+0x2c9/0x8d0 [tls] tls_sw_recvmsg+0x40f/0x1aa0 [tls] inet_recvmsg+0x1c3/0x1f0
Always reload the queue, fast path is to have the record in the queue when we wake, anyway (IOW the path going down "if !strp->stm.full_len").
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-debugUpgrade kernel-abi-stablelistsUpgrade kernel-64k-develUpgrade kernel-coreUpgrade kernel-modules-extraUpgrade kernel-uki-virtUpgrade kernel-debug-coreUpgrade kernel-rt-64k-debug-modules-extraUpgrade kernel-rt-debug-modules-extraUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rt-debug-modules-coreUpgrade rtlaUpgrade perfUpgrade kernel-rt-64k-modules-extraUpgrade kernel-rt-debug-develUpgrade kernel-rt-64k-debug-modules-coreUpgrade kernel-modules-coreUpgrade kernel-zfcpdump-develUpgrade kernel-debug-develUpgrade kernel-64k-coreUpgrade kernel-zfcpdumpUpgrade kernel-rt-coreUpgrade kernel-devel-matchedUpgrade libperfUpgrade kernel-debug-devel-matchedUpgrade kernel-docUpgrade kernel-debug-uki-virtUpgrade kernel-rt-modulesUpgrade kernel-rt-debug-modulesUpgrade kernel-64k-modules-coreUpgrade kernel-debug-modules-extraUpgrade kernel-modulesUpgrade kernel-rt-debug-kvmUpgrade kernel-rt-64k-debug-modulesUpgrade kernel-64k-debug-modules-extraUpgrade kernel-headersUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-64kUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-rtUpgrade kernel-64k-devel-matchedUpgrade kernel-debug-modulesUpgrade kernel-cross-headersUpgrade kernel-64k-debug-coreUpgrade kernel-rt-64k-debugUpgrade kernel-rt-develUpgrade kernel-rt-64k-modulesUpgrade kernel-64k-debug-modulesUpgrade kernel-toolsUpgrade kernel-64k-debug-modules-coreUpgrade kernel-rt-64k-debug-develUpgrade kernel-debug-modules-coreUpgrade rvUpgrade kernel-rt-64k-debug-coreUpgrade kernel-uki-virt-addonsUpgrade kernel-develUpgrade kernel-rt-64k-develUpgrade kernel-zfcpdump-modulesUpgrade kernel-rt-modules-coreUpgrade kernel-rt-64k-modules-coreUpgrade kernel-rt-modules-extraUpgrade kernel-tools-libs-develUpgrade kernel-rt-64k-coreUpgrade kernel-rt-debug-coreUpgrade kernel-rt-64kUpgrade kernel-64k-modules-extraUpgrade kernel-tools-libsUpgrade kernel-zfcpdump-coreUpgrade kernel-rt-debugUpgrade kernel-64k-debugUpgrade python3-perfUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-rt-kvmUpgrade kernelUpgrade kernel-64k-modulesUpgrade kernel-64k-debug-devel | Aug 25, 2025 | Aug 18, 2025 |
| Amazon_linux_2023 | — | Upgrade kernel-toolsUpgrade kernel-tools-debuginfoUpgrade bpftool6.12-debuginfoUpgrade kernel6.12-libbpfUpgrade python3-perf6.12Upgrade kernel-debuginfo-common-aarch64Upgrade python3-perfUpgrade kernel-libbpfUpgrade bpftoolUpgrade kernel-libbpf-debuginfoUpgrade kernel6.12-develUpgrade kernel-tools-develUpgrade kernel6.12Upgrade kernel-modules-extraUpgrade kernel6.12-libbpf-staticUpgrade perfUpgrade perf-debuginfoUpgrade kernel-develUpgrade perf6.12-debuginfoUpgrade python3-perf-debuginfoUpgrade python3-perf6.12-debuginfoUpgrade kernel6.12-libbpf-debuginfoUpgrade kernel6.12-tools-develUpgrade kernel6.12-libbpf-develUpgrade kernel6.12-debuginfo-common-aarch64Upgrade kernel6.12-modules-extraUpgrade kernel6.12-headersUpgrade kernel6.12-debuginfo-common-x86_64Upgrade kernel-livepatch-6.12.40-63.114Upgrade kernel-debuginfoUpgrade bpftool-debuginfoUpgrade kernel6.12-debuginfoUpgrade kernel-libbpf-staticUpgrade kernel-debuginfo-common-x86_64Upgrade kernel6.12-toolsUpgrade kernel6.12-tools-debuginfoUpgrade kernel-headersUpgrade kernel-livepatch-6.1.147-172.266Upgrade kernel-libbpf-develUpgrade kernel6.12-modules-extra-commonUpgrade kernel-modules-extra-commonUpgrade bpftool6.12Upgrade perf6.12Upgrade kernel | Sep 16, 2025 | Jul 28, 2025 |
| Debian | — | Upgrade linux-6.1Upgrade linux | Jul 31, 2025 | Jul 31, 2025 |
| Oracle_linux | — | Upgrade kernel | Aug 21, 2025 | Jul 28, 2025 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rtNo solution exists | Jul 31, 2025 | Jul 28, 2025 |
| Suse | — | Upgrade kernel-default-extraUpgrade kernel-docs-htmlUpgrade kernel-azure-optionalUpgrade cluster-md-kmp-azureUpgrade kernel-docsUpgrade kernel-kvmsmall-develUpgrade kernel-debug-develUpgrade cluster-md-kmp-defaultUpgrade dlm-kmp-azureUpgrade dtb-appleUpgrade reiserfs-kmp-64kbUpgrade dtb-lgUpgrade kernel-zfcpdumpUpgrade kselftests-kmp-azureUpgrade dtb-renesasUpgrade kernel-rt-optionalUpgrade ocfs2-kmp-64kbUpgrade dtb-amlogicUpgrade kernel-azure-extraUpgrade dtb-freescaleUpgrade dtb-broadcomUpgrade gfs2-kmp-rtUpgrade kernel-source-rtUpgrade reiserfs-kmp-rtUpgrade kernel-kvmsmall-vdsoUpgrade kernel-default-develUpgrade dtb-amazonUpgrade kernel-rt_debugUpgrade kernel-macrosUpgrade kernel-syms-rtUpgrade dtb-amdUpgrade kernel-rt_debug-develUpgrade kernel-64kbUpgrade ocfs2-kmp-rtUpgrade dtb-hisiliconUpgrade kernel-64kb-extraUpgrade kernel-default-baseUpgrade kernel-rt-livepatch-develUpgrade kernel-azureUpgrade kernel-source-vanillaUpgrade kernel-source-azureUpgrade ocfs2-kmp-azureUpgrade kselftests-kmp-rtUpgrade kernel-azure-vdsoUpgrade dlm-kmp-defaultUpgrade dtb-marvellUpgrade kernel-symsUpgrade gfs2-kmp-defaultUpgrade kernel-rt-vdsoUpgrade kernel-default-livepatchUpgrade kernel-64kb-optionalUpgrade kernel-debugUpgrade kernel-default-livepatch-develUpgrade kernel-rt_debug-vdsoUpgrade reiserfs-kmp-defaultUpgrade gfs2-kmp-64kbUpgrade dtb-socionextUpgrade kernel-kvmsmallUpgrade kernel-rt-extraUpgrade cluster-md-kmp-64kbUpgrade dtb-apmUpgrade kernel-azure-develUpgrade kernel-64kb-develUpgrade dtb-caviumUpgrade dtb-sprdUpgrade dtb-alteraUpgrade kernel-devel-azureUpgrade kernel-obs-buildUpgrade kernel-default-vdsoUpgrade dtb-allwinnerUpgrade kselftests-kmp-64kbUpgrade dtb-nvidiaUpgrade dtb-armUpgrade dlm-kmp-64kbUpgrade reiserfs-kmp-azureUpgrade kernel-develUpgrade kselftests-kmp-defaultUpgrade kernel-sourceUpgrade kernel-rtUpgrade kernel-defaultUpgrade kernel-debug-vdsoUpgrade kernel-syms-azureUpgrade kernel-obs-qaUpgrade dtb-exynosUpgrade kernel-default-optionalUpgrade kernel-default-base-rebuildUpgrade dtb-xilinxUpgrade kernel-devel-rtUpgrade dtb-qcomUpgrade kernel-rt-develUpgrade dlm-kmp-rtUpgrade ocfs2-kmp-defaultUpgrade gfs2-kmp-azureUpgrade dtb-rockchipUpgrade dtb-mediatekUpgrade cluster-md-kmp-rt | Dec 5, 2025 | Aug 27, 2025 |
| Ubuntu | — | Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-oem-6.14Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-gke-64kUpgrade linux-image-oracleUpgrade linux-image-fipsUpgrade linux-image-aws-fipsUpgrade linux-image-6.14.0-1020-gcpUpgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-azure-6.14Upgrade linux-image-gkeop-6.8Upgrade linux-image-6.8.0-100-genericUpgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-oracle-6.14Upgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-virtualUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-generic-lpaeUpgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-lowlatencyUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-6.14.0-1017-awsUpgrade linux-image-oem-22.04Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-ibmUpgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-generic-64k-6.14Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-oem-22.04aUpgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-6.8.0-1046-azureUpgrade linux-image-ibm-classicUpgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-oracle-64k-6.8Upgrade linux-image-raspi-realtime-6.8Upgrade linux-image-6.14.0-1017-aws-64kUpgrade linux-image-lowlatency-64kUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-awsUpgrade linux-image-nvidiaUpgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-gcp-6.8Upgrade linux-image-lowlatency-6.8Upgrade linux-image-gkeopUpgrade linux-image-nvidia-6.8Upgrade linux-image-oracle-64k-6.14Upgrade linux-image-6.8.0-1051-azureUpgrade linux-image-azure-lts-24.04Upgrade linux-image-genericUpgrade linux-image-6.14.0-36-generic-64kUpgrade linux-image-6.14.0-1020-gcp-64kUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-virtual-6.8Upgrade linux-image-raspi-6.14Upgrade linux-image-oracle-64kUpgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-generic-64kUpgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-6.8.0-100-fipsUpgrade linux-image-aws-64k-6.14Upgrade linux-image-azureUpgrade linux-image-intel-iotgUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-ibm-6.8Upgrade linux-image-generic-6.8Upgrade linux-image-gcp-64k-6.14Upgrade linux-image-6.14.0-1017-oracle-64kUpgrade linux-image-xilinx-6.8Upgrade linux-image-gke-64k-6.8Upgrade linux-image-oem-24.04aUpgrade linux-image-aws-6.14Upgrade linux-image-xilinxUpgrade linux-image-gcp-64kUpgrade linux-image-6.14.0-1017-oracleUpgrade linux-image-oem-24.04Upgrade linux-image-kvmUpgrade linux-image-aws-6.8Upgrade linux-image-6.14.0-1018-raspiUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-realtime-hwe-24.04Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.14.0-36-genericUpgrade linux-image-azure-fips-6.8Upgrade linux-image-gke-6.8Upgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-aws-fips-6.8Upgrade linux-image-6.8.0-1046-awsUpgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-realtime-6.14Upgrade linux-image-nvidia-64kUpgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-raspiUpgrade linux-image-raspi-6.8Upgrade linux-image-6.14.0-1017-azureUpgrade linux-image-oem-22.04bUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-gcpUpgrade linux-image-aws-64kUpgrade linux-image-virtual-6.14Upgrade linux-image-6.14.0-1016-realtimeUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-fips-6.8Upgrade linux-image-aws-lts-24.04Upgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-raspi-realtimeUpgrade linux-image-oem-22.04cUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-gcp-6.14Upgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-realtime-hwe-22.04Upgrade linux-image-6.14.0-1016-oemUpgrade linux-image-gcp-fipsUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-azure-fipsUpgrade linux-image-oracle-6.8Upgrade linux-image-generic-6.14Upgrade linux-image-realtimeUpgrade linux-image-generic-64k-6.8Upgrade linux-image-azure-6.8Upgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-gkeUpgrade linux-image-oem-22.04dUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-realtime-6.8.1Upgrade linux-image-gcp-fips-6.8Upgrade linux-image-aws-64k-6.8Upgrade linux-image-6.8.0-1023-xilinx | Jul 31, 2025 | Jul 28, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Aug 20, 2025 | Jul 28, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub