In the Linux kernel, the following vulnerability has been resolved:
tls: always refresh the queue when reading sock
After recent changes in net-next TCP compacts skbs much more aggressively. This unearthed a bug in TLS where we may try to operate on an old skb when checking if all skbs in the queue have matching decrypt state and geometry.
BUG: KASAN: slab-use-after-free in tls_strp_check_rcv+0x898/0x9a0 [tls] (net/tls/tls_strp.c:436 net/tls/tls_strp.c:530 net/tls/tls_strp.c:544) Read of size 4 at addr ffff888013085750 by task tls/13529
CPU: 2 UID: 0 PID: 13529 Comm: tls Not tainted 6.16.0-rc5-virtme Call Trace: kasan_report+0xca/0x100 tls_strp_check_rcv+0x898/0x9a0 [tls] tls_rx_rec_wait+0x2c9/0x8d0 [tls] tls_sw_recvmsg+0x40f/0x1aa0 [tls] inet_recvmsg+0x1c3/0x1f0
Always reload the queue, fast path is to have the record in the queue when we wake, anyway (IOW the path going down "if !strp->stm.full_len").
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-rt-64kUpgrade kernel-rt-64k-debug-coreUpgrade kernel-toolsUpgrade rvUpgrade kernel-rt-64k-modulesUpgrade kernel-64k-modulesUpgrade kernel-rt-modules-coreUpgrade kernel-debug-modulesUpgrade kernel-64k-devel-matchedUpgrade kernel-64k-debug-modulesUpgrade kernel-rt-develUpgrade kernel-rt-64k-modules-coreUpgrade kernel-uki-virt-addonsUpgrade kernel-tools-libs-develUpgrade kernel-zfcpdump-modulesUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-64k-debug-develUpgrade kernel-rt-64k-coreUpgrade kernel-64k-debugUpgrade kernel-rt-modules-extraUpgrade kernel-rtUpgrade kernel-64k-debug-devel-matchedUpgrade kernelUpgrade kernel-64kUpgrade kernel-develUpgrade kernel-tools-libsUpgrade kernel-zfcpdump-coreUpgrade python3-perfUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-debug-modules-coreUpgrade kernel-cross-headersUpgrade kernel-rt-kvmUpgrade kernel-rt-debugUpgrade kernel-64k-debug-coreUpgrade kernel-rt-debug-coreUpgrade kernel-rt-64k-debug-develUpgrade kernel-rt-64k-debugUpgrade kernel-64k-modules-extraUpgrade kernel-rt-64k-develUpgrade kernel-64k-debug-modules-coreUpgrade kernel-rt-64k-modules-extraUpgrade kernel-zfcpdumpUpgrade kernel-rt-debug-kvmUpgrade perfUpgrade kernel-64k-develUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-coreUpgrade kernel-docUpgrade kernel-debugUpgrade kernel-debug-devel-matchedUpgrade kernel-debug-uki-virtUpgrade kernel-rt-debug-modules-extraUpgrade kernel-64k-debug-modules-extraUpgrade kernel-debug-develUpgrade kernel-debug-coreUpgrade kernel-abi-stablelistsUpgrade libperfUpgrade rtlaUpgrade kernel-modules-extraUpgrade kernel-devel-matchedUpgrade kernel-rt-64k-debug-modules-coreUpgrade kernel-zfcpdump-develUpgrade kernel-rt-64k-debug-modulesUpgrade kernel-rt-debug-modules-coreUpgrade kernel-rt-64k-debug-modules-extraUpgrade kernel-rt-modulesUpgrade kernel-64k-coreUpgrade kernel-headersUpgrade kernel-modules-coreUpgrade kernel-rt-debug-develUpgrade kernel-modulesUpgrade kernel-64k-modules-coreUpgrade kernel-coreUpgrade kernel-uki-virtUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-debug-modules-extra | Aug 25, 2025 | Aug 18, 2025 |
| Amazon_linux_2023 | — | Upgrade kernel6.12-libbpfUpgrade perf-debuginfoUpgrade bpftool6.12-debuginfoUpgrade kernel-develUpgrade python3-perf6.12-debuginfoUpgrade perf6.12-debuginfoUpgrade python3-perf-debuginfoUpgrade kernel6.12-libbpf-debuginfoUpgrade perfUpgrade kernel-libbpf-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-tools-develUpgrade kernel-toolsUpgrade kernel-libbpfUpgrade kernel6.12-develUpgrade bpftoolUpgrade kernel6.12Upgrade python3-perf6.12Upgrade kernel-modules-extraUpgrade python3-perfUpgrade kernel-debuginfo-common-aarch64Upgrade kernel6.12-libbpf-staticUpgrade kernel6.12-debuginfo-common-aarch64Upgrade bpftool-debuginfoUpgrade perf6.12Upgrade kernel6.12-tools-develUpgrade kernel6.12-debuginfo-common-x86_64Upgrade kernel-livepatch-6.12.40-63.114Upgrade kernel-debuginfoUpgrade kernel-libbpf-develUpgrade kernel6.12-headersUpgrade bpftool6.12Upgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-modules-extra-commonUpgrade kernel6.12-tools-debuginfoUpgrade kernel6.12-modules-extra-commonUpgrade kernel6.12-libbpf-develUpgrade kernel6.12-debuginfoUpgrade kernel-libbpf-staticUpgrade kernel6.12-toolsUpgrade kernel6.12-modules-extraUpgrade kernel-headersUpgrade kernel-livepatch-6.1.147-172.266 | Sep 16, 2025 | Jul 28, 2025 |
| Debian | — | Upgrade linux-6.1Upgrade linux | Jul 31, 2025 | Jul 31, 2025 |
| Oracle_linux | — | Upgrade kernel | Aug 21, 2025 | Jul 28, 2025 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rtNo solution exists | Jul 31, 2025 | Jul 28, 2025 |
| Suse | — | Upgrade kernel-source-azureUpgrade kernel-source-vanillaUpgrade kselftests-kmp-rtUpgrade reiserfs-kmp-64kbUpgrade kernel-kvmsmall-vdsoUpgrade gfs2-kmp-rtUpgrade dtb-amdUpgrade dtb-renesasUpgrade dtb-hisiliconUpgrade dlm-kmp-defaultUpgrade dtb-appleUpgrade dtb-lgUpgrade kernel-rt-livepatch-develUpgrade kernel-symsUpgrade kernel-zfcpdumpUpgrade kernel-kvmsmall-develUpgrade kselftests-kmp-azureUpgrade kernel-debug-develUpgrade kernel-docsUpgrade kernel-azureUpgrade kernel-64kb-extraUpgrade dtb-marvellUpgrade gfs2-kmp-defaultUpgrade kernel-source-rtUpgrade kernel-default-baseUpgrade kernel-azure-extraUpgrade kernel-default-livepatchUpgrade kernel-rt_debug-develUpgrade kernel-azure-vdsoUpgrade kernel-debugUpgrade kernel-default-develUpgrade kernel-default-livepatch-develUpgrade kernel-rt_debug-vdsoUpgrade dlm-kmp-azureUpgrade kernel-64kb-optionalUpgrade kernel-rt_debugUpgrade ocfs2-kmp-azureUpgrade kernel-rt-vdsoUpgrade ocfs2-kmp-rtUpgrade cluster-md-kmp-defaultUpgrade kernel-64kbUpgrade kernel-macrosUpgrade ocfs2-kmp-64kbUpgrade kernel-default-extraUpgrade dtb-amazonUpgrade kernel-docs-htmlUpgrade cluster-md-kmp-azureUpgrade dtb-broadcomUpgrade kernel-syms-rtUpgrade kernel-rt-optionalUpgrade dtb-amlogicUpgrade dtb-freescaleUpgrade reiserfs-kmp-defaultUpgrade dtb-socionextUpgrade gfs2-kmp-64kbUpgrade kernel-azure-optionalUpgrade reiserfs-kmp-rtUpgrade kernel-debug-vdsoUpgrade dtb-exynosUpgrade kernel-defaultUpgrade dtb-mediatekUpgrade cluster-md-kmp-rtUpgrade gfs2-kmp-azureUpgrade dtb-rockchipUpgrade ocfs2-kmp-defaultUpgrade kernel-rt-extraUpgrade kernel-default-base-rebuildUpgrade dtb-xilinxUpgrade dtb-qcomUpgrade kernel-rt-develUpgrade kernel-devel-rtUpgrade kernel-default-optionalUpgrade reiserfs-kmp-azureUpgrade kernel-devel-azureUpgrade dtb-sprdUpgrade dtb-alteraUpgrade dlm-kmp-64kbUpgrade kernel-default-vdsoUpgrade kernel-obs-buildUpgrade kselftests-kmp-64kbUpgrade dtb-allwinnerUpgrade kernel-develUpgrade dtb-nvidiaUpgrade dtb-armUpgrade kernel-64kb-develUpgrade dtb-caviumUpgrade kernel-kvmsmallUpgrade kernel-azure-develUpgrade dlm-kmp-rtUpgrade dtb-apmUpgrade kernel-syms-azureUpgrade kernel-sourceUpgrade kernel-rtUpgrade kselftests-kmp-defaultUpgrade kernel-obs-qaUpgrade cluster-md-kmp-64kb | Dec 5, 2025 | Aug 27, 2025 |
| Ubuntu | — | Upgrade linux-image-6.14.0-1017-oracle-64kUpgrade linux-image-gke-6.8Upgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-azure-fips-6.8Upgrade linux-image-6.14.0-1017-oracleUpgrade linux-image-xilinx-6.8Upgrade linux-image-aws-6.8Upgrade linux-image-aws-fips-6.8Upgrade linux-image-gke-64k-6.8Upgrade linux-image-gkeUpgrade linux-image-6.8.0-1046-awsUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.14.0-1018-raspiUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-6.8.0-100-fipsUpgrade linux-image-kvmUpgrade linux-image-oem-24.04Upgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-oem-22.04dUpgrade linux-image-aws-64k-6.14Upgrade linux-image-gcp-64kUpgrade linux-image-gcp-64k-6.14Upgrade linux-image-generic-6.8Upgrade linux-image-azureUpgrade linux-image-aws-6.14Upgrade linux-image-intel-iotgUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-realtime-6.8.1Upgrade linux-image-virtual-6.8Upgrade linux-image-raspi-6.14Upgrade linux-image-aws-64k-6.8Upgrade linux-image-intel-iot-realtimeUpgrade linux-image-realtime-hwe-22.04Upgrade linux-image-generic-64kUpgrade linux-image-gcp-fips-6.8Upgrade linux-image-aws-lts-24.04Upgrade linux-image-azure-fipsUpgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-fips-6.8Upgrade linux-image-6.14.0-1017-azureUpgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-generic-64k-6.8Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-oem-22.04bUpgrade linux-image-nvidia-64kUpgrade linux-image-raspi-realtimeUpgrade linux-image-gcpUpgrade linux-image-6.14.0-1020-gcp-64kUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-realtimeUpgrade linux-image-gcp-6.14Upgrade linux-image-6.14.0-1016-realtimeUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-generic-6.14Upgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-6.14.0-1016-oemUpgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-virtual-6.14Upgrade linux-image-oracle-6.8Upgrade linux-image-aws-64kUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-realtime-hwe-24.04Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-oem-22.04cUpgrade linux-image-ibm-6.8Upgrade linux-image-raspi-6.8Upgrade linux-image-raspiUpgrade linux-image-realtime-6.14Upgrade linux-image-6.14.0-36-genericUpgrade linux-image-xilinxUpgrade linux-image-oem-24.04aUpgrade linux-image-gcp-fipsUpgrade linux-image-azure-6.8Upgrade linux-image-oracle-64kUpgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-oem-6.14Upgrade linux-image-fipsUpgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-oracle-64k-6.8Upgrade linux-image-ibm-classicUpgrade linux-image-gkeopUpgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-lowlatency-6.8Upgrade linux-image-gcp-6.8Upgrade linux-image-aws-fipsUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-nvidiaUpgrade linux-image-lowlatencyUpgrade linux-image-generic-lpaeUpgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-6.14.0-1017-awsUpgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-6.14.0-1020-gcpUpgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-generic-64k-6.14Upgrade linux-image-genericUpgrade linux-image-6.14.0-36-generic-64kUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-gkeop-6.8Upgrade linux-image-oem-22.04aUpgrade linux-image-nvidia-6.8Upgrade linux-image-oracle-64k-6.14Upgrade linux-image-ibmUpgrade linux-image-virtualUpgrade linux-image-oracle-6.14Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-azure-6.14Upgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-6.8.0-100-genericUpgrade linux-image-azure-lts-24.04Upgrade linux-image-6.8.0-1051-azureUpgrade linux-image-6.8.0-1046-azureUpgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-gke-64kUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-oracleUpgrade linux-image-oem-22.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-awsUpgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-6.14.0-1017-aws-64k | Jul 31, 2025 | Jul 28, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Aug 20, 2025 | Jul 28, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub