In the Linux kernel, the following vulnerability has been resolved:
tls: always refresh the queue when reading sock
After recent changes in net-next TCP compacts skbs much more aggressively. This unearthed a bug in TLS where we may try to operate on an old skb when checking if all skbs in the queue have matching decrypt state and geometry.
BUG: KASAN: slab-use-after-free in tls_strp_check_rcv+0x898/0x9a0 [tls] (net/tls/tls_strp.c:436 net/tls/tls_strp.c:530 net/tls/tls_strp.c:544) Read of size 4 at addr ffff888013085750 by task tls/13529
CPU: 2 UID: 0 PID: 13529 Comm: tls Not tainted 6.16.0-rc5-virtme Call Trace: kasan_report+0xca/0x100 tls_strp_check_rcv+0x898/0x9a0 [tls] tls_rx_rec_wait+0x2c9/0x8d0 [tls] tls_sw_recvmsg+0x40f/0x1aa0 [tls] inet_recvmsg+0x1c3/0x1f0
Always reload the queue, fast path is to have the record in the queue when we wake, anyway (IOW the path going down "if !strp->stm.full_len").
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-zfcpdump-modules-coreUpgrade python3-perfUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-uki-virt-addonsUpgrade kernel-debug-modulesUpgrade kernel-tools-libs-develUpgrade kernel-64k-debug-modules-coreUpgrade kernel-rt-64k-modules-coreUpgrade kernel-rt-64k-develUpgrade kernel-64k-debugUpgrade kernel-rt-64kUpgrade kernel-rt-64k-debug-develUpgrade kernel-toolsUpgrade kernel-rt-64k-debug-coreUpgrade kernel-64k-modules-extraUpgrade kernel-rt-debug-coreUpgrade kernel-rt-develUpgrade kernel-rt-64k-debugUpgrade kernel-64k-debug-modulesUpgrade kernel-rtUpgrade kernel-cross-headersUpgrade kernel-64k-debug-develUpgrade kernel-rt-modules-extraUpgrade kernel-rt-kvmUpgrade kernel-develUpgrade kernel-debug-modules-coreUpgrade kernel-64k-debug-coreUpgrade kernel-rt-64k-coreUpgrade kernel-zfcpdump-coreUpgrade kernel-rt-64k-modulesUpgrade kernel-tools-libsUpgrade kernel-64k-modulesUpgrade kernel-64k-devel-matchedUpgrade kernel-rt-debugUpgrade kernel-64kUpgrade kernel-rt-modules-coreUpgrade rvUpgrade kernel-zfcpdump-modulesUpgrade kernel-64k-debug-devel-matchedUpgrade kernelUpgrade kernel-debug-modules-extraUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-64k-develUpgrade kernel-rt-debug-modulesUpgrade kernel-coreUpgrade kernel-modules-coreUpgrade kernel-docUpgrade kernel-uki-virtUpgrade kernel-rt-coreUpgrade libperfUpgrade rtlaUpgrade kernel-debug-coreUpgrade kernel-rt-64k-modules-extraUpgrade kernel-abi-stablelistsUpgrade kernel-debug-develUpgrade kernel-rt-64k-debug-modules-extraUpgrade kernel-rt-64k-debug-modulesUpgrade kernel-debug-uki-virtUpgrade kernel-rt-modulesUpgrade kernel-zfcpdumpUpgrade kernel-rt-debug-kvmUpgrade kernel-debugUpgrade perfUpgrade kernel-64k-coreUpgrade kernel-rt-debug-modules-coreUpgrade kernel-zfcpdump-develUpgrade kernel-rt-debug-develUpgrade kernel-headersUpgrade kernel-rt-64k-debug-modules-coreUpgrade kernel-modules-extraUpgrade kernel-devel-matchedUpgrade kernel-rt-debug-modules-extraUpgrade kernel-64k-modules-coreUpgrade kernel-64k-debug-modules-extraUpgrade kernel-modulesUpgrade kernel-debug-devel-matched | Aug 25, 2025 | Aug 18, 2025 |
| Amazon_linux_2023 | — | Upgrade kernel6.12-develUpgrade perf-debuginfoUpgrade perf6.12-debuginfoUpgrade kernel-develUpgrade python3-perfUpgrade python3-perf6.12Upgrade kernel-libbpfUpgrade python3-perf-debuginfoUpgrade kernel6.12-libbpfUpgrade bpftool6.12-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade python3-perf6.12-debuginfoUpgrade kernel-libbpf-debuginfoUpgrade bpftoolUpgrade kernel-modules-extraUpgrade kernel6.12-libbpf-staticUpgrade kernel6.12Upgrade kernel6.12-libbpf-debuginfoUpgrade perfUpgrade kernel-toolsUpgrade kernel-tools-debuginfoUpgrade kernel-tools-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-modules-extra-commonUpgrade kernel6.12-modules-extraUpgrade kernel6.12-tools-develUpgrade kernel6.12-debuginfo-common-aarch64Upgrade kernelUpgrade kernel6.12-libbpf-develUpgrade kernel6.12-debuginfoUpgrade kernel6.12-debuginfo-common-x86_64Upgrade kernel-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-livepatch-6.12.40-63.114Upgrade kernel-libbpf-staticUpgrade bpftool6.12Upgrade kernel-libbpf-develUpgrade kernel-headersUpgrade perf6.12Upgrade kernel-livepatch-6.1.147-172.266Upgrade kernel6.12-headersUpgrade kernel6.12-tools-debuginfoUpgrade kernel6.12-modules-extra-commonUpgrade kernel6.12-tools | Sep 16, 2025 | Jul 28, 2025 |
| Debian | — | Upgrade linux-6.1Upgrade linux | Jul 31, 2025 | Jul 31, 2025 |
| Oracle_linux | — | Upgrade kernel | Aug 21, 2025 | Jul 28, 2025 |
| Redhat_linux | — | Upgrade kernelNo solution existsUpgrade kernel-rt | Jul 31, 2025 | Jul 28, 2025 |
| Suse | — | Upgrade kernel-default-optionalUpgrade dtb-xilinxUpgrade dtb-qcomUpgrade kernel-default-base-rebuildUpgrade dtb-caviumUpgrade kernel-devel-rtUpgrade kernel-rt-develUpgrade dtb-nvidiaUpgrade reiserfs-kmp-azureUpgrade kernel-develUpgrade dlm-kmp-64kbUpgrade kernel-kvmsmallUpgrade dlm-kmp-rtUpgrade dtb-armUpgrade kernel-defaultUpgrade kernel-obs-qaUpgrade dtb-alteraUpgrade kernel-rtUpgrade cluster-md-kmp-64kbUpgrade dtb-exynosUpgrade kernel-debug-vdsoUpgrade dtb-apmUpgrade kernel-devel-azureUpgrade kernel-sourceUpgrade dtb-sprdUpgrade kernel-syms-azureUpgrade kernel-rt-extraUpgrade kselftests-kmp-defaultUpgrade kernel-64kb-develUpgrade cluster-md-kmp-rtUpgrade kselftests-kmp-64kbUpgrade gfs2-kmp-azureUpgrade dtb-allwinnerUpgrade kernel-azure-develUpgrade ocfs2-kmp-defaultUpgrade dtb-rockchipUpgrade dtb-mediatekUpgrade kernel-default-vdsoUpgrade kernel-obs-buildUpgrade kernel-debug-develUpgrade ocfs2-kmp-azureUpgrade kernel-syms-rtUpgrade kernel-rt_debugUpgrade kernel-macrosUpgrade kernel-64kbUpgrade dtb-amazonUpgrade ocfs2-kmp-rtUpgrade dtb-renesasUpgrade dlm-kmp-azureUpgrade dtb-appleUpgrade dtb-socionextUpgrade kernel-rt_debug-vdsoUpgrade kernel-default-develUpgrade kernel-debugUpgrade kernel-kvmsmall-vdsoUpgrade kernel-default-livepatch-develUpgrade gfs2-kmp-64kbUpgrade dtb-hisiliconUpgrade kernel-source-vanillaUpgrade kernel-source-azureUpgrade kernel-rt-livepatch-develUpgrade kselftests-kmp-rtUpgrade dtb-amdUpgrade dlm-kmp-defaultUpgrade kernel-64kb-extraUpgrade kernel-azure-vdsoUpgrade kernel-azureUpgrade kernel-default-baseUpgrade gfs2-kmp-defaultUpgrade dtb-marvellUpgrade kernel-rt_debug-develUpgrade kernel-default-livepatchUpgrade kernel-azure-optionalUpgrade cluster-md-kmp-defaultUpgrade cluster-md-kmp-azureUpgrade ocfs2-kmp-64kbUpgrade kernel-rt-optionalUpgrade kernel-docs-htmlUpgrade kernel-default-extraUpgrade dtb-broadcomUpgrade kernel-symsUpgrade kernel-docsUpgrade gfs2-kmp-rtUpgrade dtb-lgUpgrade kselftests-kmp-azureUpgrade reiserfs-kmp-rtUpgrade reiserfs-kmp-defaultUpgrade kernel-source-rtUpgrade kernel-azure-extraUpgrade kernel-64kb-optionalUpgrade dtb-freescaleUpgrade dtb-amlogicUpgrade kernel-zfcpdumpUpgrade reiserfs-kmp-64kbUpgrade kernel-kvmsmall-develUpgrade kernel-rt-vdso | Dec 5, 2025 | Aug 27, 2025 |
| Ubuntu | — | Upgrade linux-image-6.14.0-36-generic-64kUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-6.8.0-1051-azureUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-oem-6.14Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-6.14.0-1017-awsUpgrade linux-image-lowlatencyUpgrade linux-image-lowlatency-64kUpgrade linux-image-azure-6.14Upgrade linux-image-6.8.0-100-genericUpgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-virtualUpgrade linux-image-gkeop-6.8Upgrade linux-image-generic-64k-6.14Upgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-6.14.0-1020-gcpUpgrade linux-image-generic-lpaeUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-6.14.0-1017-aws-64kUpgrade linux-image-aws-fipsUpgrade linux-image-awsUpgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-oracle-6.14Upgrade linux-image-genericUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-ibm-classicUpgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-gkeopUpgrade linux-image-gcp-6.8Upgrade linux-image-fipsUpgrade linux-image-gke-64kUpgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-nvidia-6.8Upgrade linux-image-oracleUpgrade linux-image-oem-22.04Upgrade linux-image-lowlatency-6.8Upgrade linux-image-6.8.0-1046-azureUpgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-azure-lts-24.04Upgrade linux-image-oem-22.04aUpgrade linux-image-ibmUpgrade linux-image-oracle-64k-6.14Upgrade linux-image-nvidiaUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-gcp-64kUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-generic-64kUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-xilinxUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-6.14.0-1016-realtimeUpgrade linux-image-virtual-6.14Upgrade linux-image-oracle-6.8Upgrade linux-image-gcp-fipsUpgrade linux-image-gcpUpgrade linux-image-aws-64kUpgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-realtime-6.14Upgrade linux-image-oem-24.04aUpgrade linux-image-nvidia-64kUpgrade linux-image-ibm-6.8Upgrade linux-image-raspi-6.8Upgrade linux-image-intel-iotgUpgrade linux-image-gkeUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-azureUpgrade linux-image-aws-64k-6.14Upgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-6.8.0-100-fipsUpgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-oem-22.04dUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-gcp-6.14Upgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-intel-iot-realtimeUpgrade linux-image-generic-64k-6.8Upgrade linux-image-fips-6.8Upgrade linux-image-azure-fipsUpgrade linux-image-aws-lts-24.04Upgrade linux-image-6.14.0-1017-azureUpgrade linux-image-6.14.0-1016-oemUpgrade linux-image-realtime-hwe-22.04Upgrade linux-image-oem-22.04bUpgrade linux-image-raspi-realtimeUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.14.0-36-genericUpgrade linux-image-raspiUpgrade linux-image-realtimeUpgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-6.14.0-1017-oracle-64kUpgrade linux-image-aws-6.14Upgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-oem-22.04cUpgrade linux-image-generic-6.8Upgrade linux-image-6.14.0-1020-gcp-64kUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-gcp-64k-6.14Upgrade linux-image-azure-6.8Upgrade linux-image-kvmUpgrade linux-image-6.14.0-1017-oracleUpgrade linux-image-oem-24.04Upgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-gke-6.8Upgrade linux-image-azure-fips-6.8Upgrade linux-image-aws-fips-6.8Upgrade linux-image-aws-6.8Upgrade linux-image-6.8.0-1046-awsUpgrade linux-image-6.14.0-1018-raspiUpgrade linux-image-xilinx-6.8Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-gke-64k-6.8Upgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-aws-64k-6.8Upgrade linux-image-raspi-6.14Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-virtual-6.8Upgrade linux-image-realtime-6.8.1Upgrade linux-image-oracle-64kUpgrade linux-image-gcp-fips-6.8Upgrade linux-image-generic-6.14 | Jul 31, 2025 | Jul 28, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Aug 20, 2025 | Jul 28, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub