In the Linux kernel, the following vulnerability has been resolved:
tls: always refresh the queue when reading sock
After recent changes in net-next TCP compacts skbs much more aggressively. This unearthed a bug in TLS where we may try to operate on an old skb when checking if all skbs in the queue have matching decrypt state and geometry.
BUG: KASAN: slab-use-after-free in tls_strp_check_rcv+0x898/0x9a0 [tls] (net/tls/tls_strp.c:436 net/tls/tls_strp.c:530 net/tls/tls_strp.c:544) Read of size 4 at addr ffff888013085750 by task tls/13529
CPU: 2 UID: 0 PID: 13529 Comm: tls Not tainted 6.16.0-rc5-virtme Call Trace: kasan_report+0xca/0x100 tls_strp_check_rcv+0x898/0x9a0 [tls] tls_rx_rec_wait+0x2c9/0x8d0 [tls] tls_sw_recvmsg+0x40f/0x1aa0 [tls] inet_recvmsg+0x1c3/0x1f0
Always reload the queue, fast path is to have the record in the queue when we wake, anyway (IOW the path going down "if !strp->stm.full_len").
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-rt-64k-debug-coreUpgrade rvUpgrade kernel-64k-modulesUpgrade kernel-rt-64k-debugUpgrade kernel-debug-modulesUpgrade kernel-64k-devel-matchedUpgrade kernelUpgrade kernel-rt-64k-modulesUpgrade kernel-64k-debug-modules-coreUpgrade kernel-64k-debug-modulesUpgrade kernel-rt-64k-coreUpgrade kernel-rt-kvmUpgrade kernel-rt-develUpgrade kernel-rt-64k-develUpgrade kernel-rt-modules-coreUpgrade kernel-rt-64k-debug-develUpgrade kernel-64k-debugUpgrade kernel-cross-headersUpgrade kernel-rtUpgrade kernel-tools-libsUpgrade kernel-rt-debugUpgrade kernel-rt-modules-extraUpgrade kernel-64k-modules-extraUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-rt-64kUpgrade kernel-rt-debug-coreUpgrade kernel-tools-libs-develUpgrade kernel-64k-debug-coreUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-uki-virt-addonsUpgrade kernel-toolsUpgrade kernel-develUpgrade python3-perfUpgrade kernel-debug-modules-coreUpgrade kernel-zfcpdump-modulesUpgrade kernel-zfcpdump-coreUpgrade kernel-64k-debug-develUpgrade kernel-64kUpgrade kernel-rt-64k-modules-coreUpgrade kernel-rt-debug-modules-coreUpgrade kernel-64k-modules-coreUpgrade kernel-devel-matchedUpgrade kernel-rt-64k-debug-modules-extraUpgrade kernel-debug-uki-virtUpgrade kernel-modulesUpgrade kernel-rt-debug-modules-extraUpgrade kernel-coreUpgrade kernel-rt-coreUpgrade kernel-debugUpgrade perfUpgrade kernel-debug-modules-extraUpgrade kernel-rt-modulesUpgrade kernel-rt-debug-modulesUpgrade kernel-uki-virtUpgrade kernel-modules-extraUpgrade kernel-modules-coreUpgrade kernel-rt-64k-debug-modules-coreUpgrade kernel-debug-devel-matchedUpgrade kernel-64k-debug-modules-extraUpgrade kernel-rt-64k-modules-extraUpgrade rtlaUpgrade kernel-debug-develUpgrade kernel-abi-stablelistsUpgrade kernel-debug-coreUpgrade kernel-64k-develUpgrade kernel-rt-debug-develUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-64k-coreUpgrade kernel-docUpgrade kernel-rt-64k-debug-modulesUpgrade kernel-rt-debug-kvmUpgrade kernel-headersUpgrade kernel-zfcpdump-develUpgrade kernel-zfcpdumpUpgrade libperf | Aug 25, 2025 | Aug 18, 2025 |
| Amazon_linux_2023 | — | Upgrade kernel-headersUpgrade bpftool6.12Upgrade kernelUpgrade kernel6.12-debuginfo-common-aarch64Upgrade kernel-modules-extra-commonUpgrade perf6.12Upgrade kernel6.12-modules-extraUpgrade kernel6.12-tools-debuginfoUpgrade kernel6.12-toolsUpgrade kernel6.12-modules-extra-commonUpgrade kernel-libbpf-staticUpgrade kernel6.12-debuginfo-common-x86_64Upgrade bpftool-debuginfoUpgrade kernel6.12-tools-develUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-livepatch-6.1.147-172.266Upgrade kernel6.12-headersUpgrade kernel-libbpf-develUpgrade kernel-livepatch-6.12.40-63.114Upgrade kernel6.12-debuginfoUpgrade kernel6.12-libbpf-develUpgrade kernel6.12-develUpgrade kernel-libbpfUpgrade python3-perfUpgrade kernel-debuginfo-common-aarch64Upgrade python3-perf6.12Upgrade kernel-toolsUpgrade kernel-modules-extraUpgrade kernel6.12-libbpf-staticUpgrade kernel6.12Upgrade bpftool6.12-debuginfoUpgrade perf-debuginfoUpgrade kernel-develUpgrade python3-perf6.12-debuginfoUpgrade kernel-tools-develUpgrade kernel6.12-libbpf-debuginfoUpgrade perfUpgrade kernel-tools-debuginfoUpgrade kernel6.12-libbpfUpgrade kernel-libbpf-debuginfoUpgrade perf6.12-debuginfoUpgrade bpftoolUpgrade python3-perf-debuginfo | Sep 16, 2025 | Jul 28, 2025 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Jul 31, 2025 | Jul 31, 2025 |
| Oracle_linux | — | Upgrade kernel | Aug 21, 2025 | Jul 28, 2025 |
| Redhat_linux | — | No solution existsUpgrade kernelUpgrade kernel-rt | Jul 31, 2025 | Jul 28, 2025 |
| Suse | — | Upgrade kernel-default-develUpgrade gfs2-kmp-64kbUpgrade kernel-debugUpgrade kernel-default-livepatch-develUpgrade kernel-source-rtUpgrade reiserfs-kmp-defaultUpgrade kernel-symsUpgrade kernel-zfcpdumpUpgrade kernel-docsUpgrade dlm-kmp-defaultUpgrade dtb-renesasUpgrade gfs2-kmp-rtUpgrade kernel-debug-develUpgrade kernel-azureUpgrade kselftests-kmp-azureUpgrade dlm-kmp-azureUpgrade kernel-kvmsmall-develUpgrade dtb-appleUpgrade ocfs2-kmp-64kbUpgrade reiserfs-kmp-64kbUpgrade dtb-lgUpgrade kernel-azure-extraUpgrade dtb-hisiliconUpgrade kernel-azure-vdsoUpgrade dtb-amdUpgrade kernel-azure-optionalUpgrade kernel-source-azureUpgrade kernel-source-vanillaUpgrade kselftests-kmp-rtUpgrade kernel-default-extraUpgrade cluster-md-kmp-azureUpgrade cluster-md-kmp-defaultUpgrade kernel-rt-livepatch-develUpgrade kernel-rt-optionalUpgrade kernel-64kb-extraUpgrade dtb-broadcomUpgrade kernel-docs-htmlUpgrade kernel-rt_debug-vdsoUpgrade kernel-rt_debug-develUpgrade dtb-marvellUpgrade gfs2-kmp-defaultUpgrade kernel-default-baseUpgrade dtb-amlogicUpgrade dtb-freescaleUpgrade reiserfs-kmp-rtUpgrade kernel-64kb-optionalUpgrade kernel-default-livepatchUpgrade dtb-socionextUpgrade kernel-kvmsmall-vdsoUpgrade kernel-rt-vdsoUpgrade kernel-macrosUpgrade kernel-64kbUpgrade ocfs2-kmp-azureUpgrade ocfs2-kmp-rtUpgrade dtb-amazonUpgrade kernel-rt_debugUpgrade kernel-syms-rtUpgrade kernel-rtUpgrade kernel-obs-qaUpgrade cluster-md-kmp-64kbUpgrade kselftests-kmp-defaultUpgrade cluster-md-kmp-rtUpgrade ocfs2-kmp-defaultUpgrade gfs2-kmp-azureUpgrade dtb-rockchipUpgrade dtb-mediatekUpgrade dlm-kmp-rtUpgrade dtb-apmUpgrade kernel-64kb-develUpgrade dtb-nvidiaUpgrade dtb-armUpgrade reiserfs-kmp-azureUpgrade kernel-devel-azureUpgrade dtb-sprdUpgrade dtb-alteraUpgrade kernel-develUpgrade dlm-kmp-64kbUpgrade kernel-azure-develUpgrade dtb-allwinnerUpgrade kselftests-kmp-64kbUpgrade kernel-rt-extraUpgrade kernel-obs-buildUpgrade kernel-default-vdsoUpgrade kernel-kvmsmallUpgrade dtb-caviumUpgrade kernel-rt-develUpgrade kernel-devel-rtUpgrade kernel-default-optionalUpgrade kernel-default-base-rebuildUpgrade dtb-xilinxUpgrade dtb-qcomUpgrade kernel-defaultUpgrade kernel-debug-vdsoUpgrade dtb-exynosUpgrade kernel-syms-azureUpgrade kernel-source | Dec 5, 2025 | Aug 27, 2025 |
| Ubuntu | — | Upgrade linux-image-genericUpgrade linux-image-6.14.0-36-generic-64kUpgrade linux-image-oracleUpgrade linux-image-generic-64k-6.14Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-oem-22.04Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-gkeop-6.8Upgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-6.8.0-100-genericUpgrade linux-image-virtualUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-fipsUpgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-6.14.0-1017-aws-64kUpgrade linux-image-6.14.0-1020-gcpUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-oem-6.14Upgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-raspi-realtime-6.8Upgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-gkeopUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-oracle-6.14Upgrade linux-image-azure-6.14Upgrade linux-image-ibm-classicUpgrade linux-image-lowlatency-64kUpgrade linux-image-gke-64kUpgrade linux-image-6.8.0-1046-azureUpgrade linux-image-6.8.0-1051-azureUpgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-ibmUpgrade linux-image-6.14.0-1017-awsUpgrade linux-image-generic-lpaeUpgrade linux-image-lowlatencyUpgrade linux-image-azure-lts-24.04Upgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-nvidiaUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-nvidia-6.8Upgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-awsUpgrade linux-image-aws-fipsUpgrade linux-image-gcp-6.8Upgrade linux-image-oem-22.04aUpgrade linux-image-lowlatency-6.8Upgrade linux-image-oracle-64k-6.14Upgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-oracle-6.8Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-oem-22.04cUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-generic-6.14Upgrade linux-image-fips-6.8Upgrade linux-image-azure-6.8Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-gcp-6.14Upgrade linux-image-gcp-64k-6.8Upgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-6.14.0-1020-gcp-64kUpgrade linux-image-6.14.0-1017-azureUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-gcp-fips-6.8Upgrade linux-image-aws-64k-6.8Upgrade linux-image-realtime-6.8.1Upgrade linux-image-virtual-6.8Upgrade linux-image-oracle-64kUpgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-raspi-6.14Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-raspiUpgrade linux-image-xilinxUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-6.14.0-36-genericUpgrade linux-image-aws-lts-24.04Upgrade linux-image-oem-22.04bUpgrade linux-image-oem-22.04dUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-generic-64k-6.8Upgrade linux-image-azure-fipsUpgrade linux-image-generic-64kUpgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-realtimeUpgrade linux-image-raspi-realtimeUpgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-realtime-hwe-22.04Upgrade linux-image-gcp-fipsUpgrade linux-image-6.8.0-1046-awsUpgrade linux-image-6.14.0-1018-raspiUpgrade linux-image-6.14.0-1017-oracleUpgrade linux-image-xilinx-6.8Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-oem-24.04Upgrade linux-image-gke-6.8Upgrade linux-image-gke-64k-6.8Upgrade linux-image-azure-fips-6.8Upgrade linux-image-aws-fips-6.8Upgrade linux-image-kvmUpgrade linux-image-aws-6.8Upgrade linux-image-6.14.0-1016-oemUpgrade linux-image-gcp-64k-6.14Upgrade linux-image-generic-6.8Upgrade linux-image-ibm-6.8Upgrade linux-image-gcp-64kUpgrade linux-image-aws-6.14Upgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-6.14.0-1017-oracle-64kUpgrade linux-image-realtime-6.14Upgrade linux-image-oem-24.04aUpgrade linux-image-nvidia-64kUpgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-raspi-6.8Upgrade linux-image-azureUpgrade linux-image-aws-64k-6.14Upgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-intel-iotgUpgrade linux-image-gkeUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-100-fipsUpgrade linux-image-gcpUpgrade linux-image-virtual-6.14Upgrade linux-image-6.14.0-1016-realtimeUpgrade linux-image-aws-64k | Jul 31, 2025 | Jul 28, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Aug 20, 2025 | Jul 28, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub