The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
In the Linux kernel, the following vulnerability has been resolved:
tls: always refresh the queue when reading sock
After recent changes in net-next TCP compacts skbs much more aggressively. This unearthed a bug in TLS where we may try to operate on an old skb when checking if all skbs in the queue have matching decrypt state and geometry.
BUG: KASAN: slab-use-after-free in tls_strp_check_rcv+0x898/0x9a0 [tls] (net/tls/tls_strp.c:436 net/tls/tls_strp.c:530 net/tls/tls_strp.c:544) Read of size 4 at addr ffff888013085750 by task tls/13529
CPU: 2 UID: 0 PID: 13529 Comm: tls Not tainted 6.16.0-rc5-virtme Call Trace: kasan_report+0xca/0x100 tls_strp_check_rcv+0x898/0x9a0 [tls] tls_rx_rec_wait+0x2c9/0x8d0 [tls] tls_sw_recvmsg+0x40f/0x1aa0 [tls] inet_recvmsg+0x1c3/0x1f0
Always reload the queue, fast path is to have the record in the queue when we wake, anyway (IOW the path going down "if !strp->stm.full_len").
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-rt-64kUpgrade kernel-rt-debug-coreUpgrade kernel-64k-debug-modulesUpgrade kernel-64k-debug-coreUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-uki-virt-addonsUpgrade kernel-rt-modules-extraUpgrade kernel-rt-develUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-tools-libs-develUpgrade kernel-rtUpgrade kernel-64k-modulesUpgrade kernel-zfcpdump-coreUpgrade kernel-debug-modulesUpgrade kernel-64k-modules-extraUpgrade kernel-64k-devel-matchedUpgrade kernel-cross-headersUpgrade kernel-tools-libsUpgrade kernel-rt-64k-develUpgrade kernel-rt-debugUpgrade kernel-toolsUpgrade rvUpgrade kernel-debug-modules-coreUpgrade python3-perfUpgrade kernel-rt-64k-debug-develUpgrade kernel-rt-64k-modulesUpgrade kernel-rt-64k-debug-coreUpgrade kernel-64k-debugUpgrade kernel-develUpgrade kernel-rt-64k-debugUpgrade kernel-rt-kvmUpgrade kernel-64k-debug-develUpgrade kernel-rt-64k-coreUpgrade kernel-zfcpdump-modulesUpgrade kernel-64k-debug-modules-coreUpgrade kernel-rt-64k-modules-coreUpgrade kernel-rt-modules-coreUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-64kUpgrade kernelUpgrade kernel-headersUpgrade rtlaUpgrade kernel-rt-64k-debug-modules-extraUpgrade kernel-64k-coreUpgrade kernel-docUpgrade kernel-rt-64k-debug-modules-coreUpgrade kernel-debug-coreUpgrade kernel-modulesUpgrade kernel-rt-64k-debug-modulesUpgrade kernel-rt-debug-kvmUpgrade kernel-rt-coreUpgrade kernel-rt-modulesUpgrade perfUpgrade kernel-debug-devel-matchedUpgrade kernel-debugUpgrade kernel-devel-matchedUpgrade kernel-zfcpdump-develUpgrade kernel-debug-uki-virtUpgrade kernel-debug-develUpgrade kernel-rt-debug-develUpgrade kernel-64k-develUpgrade kernel-abi-stablelistsUpgrade libperfUpgrade kernel-coreUpgrade kernel-debug-modules-extraUpgrade kernel-modules-coreUpgrade kernel-64k-debug-modules-extraUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-modules-extraUpgrade kernel-uki-virtUpgrade kernel-rt-debug-modulesUpgrade kernel-zfcpdumpUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-debug-modules-coreUpgrade kernel-64k-modules-coreUpgrade kernel-rt-64k-modules-extra | Aug 25, 2025 | Aug 18, 2025 |
| Amazon_linux_2023 | — | Upgrade kernel6.12-headersUpgrade kernel6.12-libbpf-develUpgrade kernel-libbpf-staticUpgrade kernel6.12-debuginfoUpgrade kernelUpgrade kernel-livepatch-6.1.147-172.266Upgrade kernel6.12-tools-debuginfoUpgrade kernel6.12-modules-extra-commonUpgrade kernel6.12-debuginfo-common-aarch64Upgrade kernel6.12-modules-extraUpgrade kernel6.12-toolsUpgrade bpftool6.12Upgrade kernel-libbpf-develUpgrade kernel-debuginfo-common-x86_64Upgrade perf6.12Upgrade kernel-headersUpgrade kernel-modules-extra-commonUpgrade kernel6.12-tools-develUpgrade kernel-debuginfoUpgrade kernel6.12-debuginfo-common-x86_64Upgrade kernel-livepatch-6.12.40-63.114Upgrade bpftool-debuginfoUpgrade kernel6.12-libbpf-debuginfoUpgrade bpftool6.12-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade python3-perf-debuginfoUpgrade perf-debuginfoUpgrade kernel6.12-libbpfUpgrade python3-perf6.12-debuginfoUpgrade kernel-libbpf-debuginfoUpgrade kernel-tools-develUpgrade kernel6.12-libbpf-staticUpgrade kernel-modules-extraUpgrade bpftoolUpgrade kernel6.12Upgrade kernel-develUpgrade perf6.12-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-toolsUpgrade perfUpgrade python3-perf6.12Upgrade python3-perfUpgrade kernel6.12-develUpgrade kernel-libbpf | Sep 16, 2025 | Jul 28, 2025 |
| Debian | — | Upgrade linux-6.1Upgrade linux | Jul 31, 2025 | Jul 31, 2025 |
| Oracle_linux | — | Upgrade kernel | Aug 21, 2025 | Jul 28, 2025 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernelNo solution exists | Jul 31, 2025 | Jul 28, 2025 |
| Suse | — | Upgrade dtb-hisiliconUpgrade kernel-azure-vdsoUpgrade gfs2-kmp-64kbUpgrade dtb-amdUpgrade kernel-kvmsmall-vdsoUpgrade kernel-rt_debug-vdsoUpgrade kernel-debugUpgrade kernel-rt_debug-develUpgrade dtb-marvellUpgrade kernel-syms-rtUpgrade kernel-rt-vdsoUpgrade ocfs2-kmp-64kbUpgrade dlm-kmp-defaultUpgrade kernel-default-extraUpgrade kernel-docs-htmlUpgrade kernel-rt-optionalUpgrade kernel-64kbUpgrade reiserfs-kmp-64kbUpgrade kernel-azure-optionalUpgrade kernel-docsUpgrade kernel-macrosUpgrade kernel-symsUpgrade kselftests-kmp-azureUpgrade kernel-rt_debugUpgrade dtb-socionextUpgrade dtb-appleUpgrade dtb-lgUpgrade dlm-kmp-azureUpgrade gfs2-kmp-rtUpgrade kselftests-kmp-rtUpgrade kernel-zfcpdumpUpgrade dtb-renesasUpgrade kernel-debug-develUpgrade kernel-64kb-extraUpgrade kernel-rt-livepatch-develUpgrade kernel-source-azureUpgrade kernel-kvmsmall-develUpgrade kernel-source-vanillaUpgrade kernel-default-develUpgrade dtb-broadcomUpgrade kernel-default-livepatch-develUpgrade kernel-default-livepatchUpgrade cluster-md-kmp-azureUpgrade cluster-md-kmp-defaultUpgrade ocfs2-kmp-rtUpgrade dtb-amlogicUpgrade ocfs2-kmp-azureUpgrade dtb-freescaleUpgrade kernel-default-baseUpgrade kernel-azureUpgrade dtb-amazonUpgrade kernel-64kb-optionalUpgrade gfs2-kmp-defaultUpgrade kernel-azure-extraUpgrade kernel-source-rtUpgrade reiserfs-kmp-rtUpgrade reiserfs-kmp-defaultUpgrade kernel-azure-develUpgrade dtb-armUpgrade dtb-mediatekUpgrade dtb-allwinnerUpgrade kselftests-kmp-64kbUpgrade kernel-rt-extraUpgrade kernel-obs-buildUpgrade kernel-default-vdsoUpgrade cluster-md-kmp-rtUpgrade ocfs2-kmp-defaultUpgrade kselftests-kmp-defaultUpgrade kernel-syms-azureUpgrade kernel-sourceUpgrade kernel-obs-qaUpgrade kernel-defaultUpgrade kernel-default-optionalUpgrade dtb-xilinxUpgrade dtb-qcomUpgrade kernel-rt-develUpgrade kernel-devel-rtUpgrade kernel-default-base-rebuildUpgrade kernel-rtUpgrade kernel-debug-vdsoUpgrade dtb-exynosUpgrade cluster-md-kmp-64kbUpgrade dtb-caviumUpgrade kernel-64kb-develUpgrade dlm-kmp-rtUpgrade kernel-kvmsmallUpgrade dtb-apmUpgrade dlm-kmp-64kbUpgrade reiserfs-kmp-azureUpgrade kernel-develUpgrade dtb-nvidiaUpgrade dtb-alteraUpgrade kernel-devel-azureUpgrade dtb-sprdUpgrade gfs2-kmp-azureUpgrade dtb-rockchip | Dec 5, 2025 | Aug 27, 2025 |
| Ubuntu | — | Upgrade linux-image-ibm-classicUpgrade linux-image-6.14.0-1017-aws-64kUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-gkeop-6.8Upgrade linux-image-oracle-6.14Upgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-gke-64kUpgrade linux-image-azure-lts-24.04Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-gkeopUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-ibmUpgrade linux-image-6.14.0-36-generic-64kUpgrade linux-image-6.8.0-1051-azureUpgrade linux-image-oem-22.04Upgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-6.8.0-100-genericUpgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-6.8.0-1046-azureUpgrade linux-image-oracle-64k-6.14Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-nvidia-6.8Upgrade linux-image-oem-22.04aUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-lowlatencyUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-6.14.0-1017-awsUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-generic-64k-6.14Upgrade linux-image-fipsUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.14.0-1020-gcpUpgrade linux-image-generic-lpaeUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-oem-6.14Upgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-genericUpgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-lowlatency-64kUpgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-azure-6.14Upgrade linux-image-aws-fipsUpgrade linux-image-awsUpgrade linux-image-gcp-6.8Upgrade linux-image-nvidiaUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-lowlatency-6.8Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-oracleUpgrade linux-image-virtualUpgrade linux-image-gcp-64k-6.14Upgrade linux-image-generic-6.8Upgrade linux-image-aws-6.8Upgrade linux-image-aws-fips-6.8Upgrade linux-image-azure-fips-6.8Upgrade linux-image-realtime-6.14Upgrade linux-image-oem-24.04aUpgrade linux-image-ibm-6.8Upgrade linux-image-gcp-64kUpgrade linux-image-nvidia-64kUpgrade linux-image-aws-6.14Upgrade linux-image-6.14.0-1017-oracle-64kUpgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-oracle-64kUpgrade linux-image-generic-64kUpgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-6.8.0-1046-awsUpgrade linux-image-xilinx-6.8Upgrade linux-image-intel-iot-realtimeUpgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-realtime-6.8.1Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-raspi-realtimeUpgrade linux-image-gcpUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-oracle-6.8Upgrade linux-image-gcp-fipsUpgrade linux-image-virtual-6.14Upgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-generic-6.14Upgrade linux-image-6.14.0-1016-realtimeUpgrade linux-image-aws-64kUpgrade linux-image-intel-iotgUpgrade linux-image-oem-22.04dUpgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-azureUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-gkeUpgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-100-fipsUpgrade linux-image-aws-64k-6.14Upgrade linux-image-gcp-6.14Upgrade linux-image-azure-6.8Upgrade linux-image-6.14.0-1020-gcp-64kUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-gcp-64k-6.8Upgrade linux-image-oem-22.04cUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-realtime-hwe-24.04Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-xilinxUpgrade linux-image-6.14.0-36-genericUpgrade linux-image-raspiUpgrade linux-image-oem-24.04Upgrade linux-image-gke-64k-6.8Upgrade linux-image-kvmUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.14.0-1018-raspiUpgrade linux-image-gke-6.8Upgrade linux-image-6.14.0-1017-oracleUpgrade linux-image-raspi-6.14Upgrade linux-image-generic-64k-6.8Upgrade linux-image-aws-64k-6.8Upgrade linux-image-oem-22.04bUpgrade linux-image-aws-lts-24.04Upgrade linux-image-azure-fipsUpgrade linux-image-gcp-fips-6.8Upgrade linux-image-virtual-6.8Upgrade linux-image-6.14.0-1017-azureUpgrade linux-image-fips-6.8Upgrade linux-image-realtime-hwe-22.04Upgrade linux-image-6.14.0-1016-oemUpgrade linux-image-raspi-6.8Upgrade linux-image-realtimeUpgrade linux-image-6.8.0-100-lowlatency-64k | Jul 31, 2025 | Jul 28, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Aug 20, 2025 | Jul 28, 2025 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub