In the Linux kernel, the following vulnerability has been resolved:
tls: always refresh the queue when reading sock
After recent changes in net-next TCP compacts skbs much more aggressively. This unearthed a bug in TLS where we may try to operate on an old skb when checking if all skbs in the queue have matching decrypt state and geometry.
BUG: KASAN: slab-use-after-free in tls_strp_check_rcv+0x898/0x9a0 [tls] (net/tls/tls_strp.c:436 net/tls/tls_strp.c:530 net/tls/tls_strp.c:544) Read of size 4 at addr ffff888013085750 by task tls/13529
CPU: 2 UID: 0 PID: 13529 Comm: tls Not tainted 6.16.0-rc5-virtme Call Trace: kasan_report+0xca/0x100 tls_strp_check_rcv+0x898/0x9a0 [tls] tls_rx_rec_wait+0x2c9/0x8d0 [tls] tls_sw_recvmsg+0x40f/0x1aa0 [tls] inet_recvmsg+0x1c3/0x1f0
Always reload the queue, fast path is to have the record in the queue when we wake, anyway (IOW the path going down "if !strp->stm.full_len").
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-devel-matchedUpgrade kernel-rt-64k-debug-modules-extraUpgrade kernel-rt-debug-develUpgrade kernel-zfcpdump-develUpgrade kernel-modulesUpgrade kernel-rt-64k-debug-modulesUpgrade kernel-rt-coreUpgrade kernel-rt-debug-modules-coreUpgrade kernel-coreUpgrade kernel-64k-modules-coreUpgrade kernel-debugUpgrade kernel-rt-debug-modulesUpgrade kernel-64k-develUpgrade kernel-64k-coreUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-debug-modules-extraUpgrade kernel-docUpgrade perfUpgrade kernel-rt-modulesUpgrade kernel-headersUpgrade kernel-modules-extraUpgrade kernel-rt-debug-kvmUpgrade kernel-rt-64k-modules-extraUpgrade kernel-debug-coreUpgrade kernel-uki-virtUpgrade kernel-debug-develUpgrade rtlaUpgrade kernel-debug-devel-matchedUpgrade kernel-64k-debug-modules-extraUpgrade kernel-zfcpdumpUpgrade kernel-abi-stablelistsUpgrade kernel-modules-coreUpgrade kernel-rt-64k-debug-modules-coreUpgrade kernel-rt-debug-modules-extraUpgrade libperfUpgrade kernel-debug-uki-virtUpgrade kernel-rt-modules-extraUpgrade kernel-zfcpdump-coreUpgrade python3-perfUpgrade kernel-debug-modulesUpgrade kernel-zfcpdump-modulesUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-64kUpgrade kernel-64k-debug-develUpgrade kernel-debug-modules-coreUpgrade kernel-toolsUpgrade kernel-rt-64k-coreUpgrade kernel-rt-64k-modules-coreUpgrade kernel-rt-64k-develUpgrade kernel-rt-64k-debug-develUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-64k-debug-coreUpgrade kernel-rtUpgrade kernel-rt-64k-debug-coreUpgrade kernel-rt-64k-modulesUpgrade rvUpgrade kernel-rt-modules-coreUpgrade kernelUpgrade kernel-rt-debug-coreUpgrade kernel-64k-modulesUpgrade kernel-64k-devel-matchedUpgrade kernel-rt-64kUpgrade kernel-tools-libsUpgrade kernel-uki-virt-addonsUpgrade kernel-rt-kvmUpgrade kernel-develUpgrade kernel-64k-debug-modules-coreUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-tools-libs-develUpgrade kernel-64k-debug-modulesUpgrade kernel-rt-develUpgrade kernel-64k-modules-extraUpgrade kernel-rt-debugUpgrade kernel-64k-debugUpgrade kernel-rt-64k-debugUpgrade kernel-cross-headers | Aug 25, 2025 | Aug 18, 2025 |
| Amazon_linux_2023 | — | Upgrade bpftool6.12Upgrade kernel6.12-debuginfo-common-x86_64Upgrade perf6.12Upgrade kernel6.12-headersUpgrade kernel6.12-toolsUpgrade kernel6.12-modules-extraUpgrade kernel-debuginfo-common-x86_64Upgrade kernel6.12-tools-develUpgrade kernel6.12-debuginfoUpgrade kernel6.12-tools-debuginfoUpgrade kernel-libbpf-staticUpgrade kernel6.12-modules-extra-commonUpgrade kernel-libbpf-develUpgrade kernel-modules-extra-commonUpgrade bpftool-debuginfoUpgrade kernel6.12-libbpf-develUpgrade kernel-livepatch-6.1.147-172.266Upgrade kernel-debuginfoUpgrade kernel-headersUpgrade kernel6.12-debuginfo-common-aarch64Upgrade kernel-livepatch-6.12.40-63.114Upgrade kernelUpgrade kernel-libbpf-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-tools-develUpgrade perfUpgrade kernel6.12-libbpf-debuginfoUpgrade kernel-toolsUpgrade python3-perfUpgrade kernel-debuginfo-common-aarch64Upgrade python3-perf6.12Upgrade kernel6.12-develUpgrade kernel-libbpfUpgrade kernel-develUpgrade perf6.12-debuginfoUpgrade kernel6.12-libbpf-staticUpgrade bpftoolUpgrade kernel6.12Upgrade kernel-modules-extraUpgrade python3-perf-debuginfoUpgrade bpftool6.12-debuginfoUpgrade python3-perf6.12-debuginfoUpgrade perf-debuginfoUpgrade kernel6.12-libbpf | Sep 16, 2025 | Jul 28, 2025 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Jul 31, 2025 | Jul 31, 2025 |
| Oracle_linux | — | Upgrade kernel | Aug 21, 2025 | Jul 28, 2025 |
| Redhat_linux | — | Upgrade kernelNo solution existsUpgrade kernel-rt | Jul 31, 2025 | Jul 28, 2025 |
| Suse | — | Upgrade kernel-64kb-develUpgrade dtb-sprdUpgrade kernel-devel-azureUpgrade kernel-rtUpgrade dtb-alteraUpgrade kselftests-kmp-defaultUpgrade kernel-syms-azureUpgrade cluster-md-kmp-64kbUpgrade dtb-apmUpgrade dlm-kmp-rtUpgrade dtb-rockchipUpgrade kernel-kvmsmallUpgrade gfs2-kmp-azureUpgrade cluster-md-kmp-rtUpgrade dtb-mediatekUpgrade kernel-azure-develUpgrade ocfs2-kmp-defaultUpgrade dtb-qcomUpgrade dtb-xilinxUpgrade kernel-rt-develUpgrade kernel-default-base-rebuildUpgrade kernel-default-optionalUpgrade kernel-devel-rtUpgrade dtb-caviumUpgrade kernel-debug-vdsoUpgrade dlm-kmp-64kbUpgrade dtb-armUpgrade kernel-default-vdsoUpgrade dtb-nvidiaUpgrade kernel-obs-buildUpgrade kernel-rt-extraUpgrade dtb-allwinnerUpgrade kernel-develUpgrade kselftests-kmp-64kbUpgrade reiserfs-kmp-azureUpgrade kernel-defaultUpgrade dtb-exynosUpgrade kernel-obs-qaUpgrade kernel-sourceUpgrade dtb-hisiliconUpgrade cluster-md-kmp-defaultUpgrade dtb-renesasUpgrade kernel-default-extraUpgrade kernel-azure-optionalUpgrade dtb-broadcomUpgrade kselftests-kmp-azureUpgrade kernel-zfcpdumpUpgrade kernel-symsUpgrade kernel-docsUpgrade kernel-debug-develUpgrade reiserfs-kmp-64kbUpgrade kernel-kvmsmall-develUpgrade dtb-appleUpgrade kernel-azureUpgrade dtb-freescaleUpgrade dtb-amlogicUpgrade reiserfs-kmp-rtUpgrade reiserfs-kmp-defaultUpgrade kernel-source-rtUpgrade kernel-64kb-optionalUpgrade dlm-kmp-defaultUpgrade kernel-azure-extraUpgrade kernel-default-livepatchUpgrade dtb-marvellUpgrade kernel-rt_debug-develUpgrade kernel-default-baseUpgrade gfs2-kmp-defaultUpgrade kernel-64kb-extraUpgrade dtb-amdUpgrade kselftests-kmp-rtUpgrade kernel-source-vanillaUpgrade kernel-rt-livepatch-develUpgrade kernel-azure-vdsoUpgrade kernel-source-azureUpgrade dlm-kmp-azureUpgrade kernel-rt_debugUpgrade kernel-rt-vdsoUpgrade kernel-macrosUpgrade kernel-64kbUpgrade dtb-amazonUpgrade ocfs2-kmp-rtUpgrade ocfs2-kmp-azureUpgrade kernel-syms-rtUpgrade gfs2-kmp-64kbUpgrade kernel-default-livepatch-develUpgrade kernel-default-develUpgrade kernel-debugUpgrade kernel-rt_debug-vdsoUpgrade kernel-kvmsmall-vdsoUpgrade dtb-socionextUpgrade dtb-lgUpgrade gfs2-kmp-rtUpgrade cluster-md-kmp-azureUpgrade ocfs2-kmp-64kbUpgrade kernel-rt-optionalUpgrade kernel-docs-html | Dec 5, 2025 | Aug 27, 2025 |
| Ubuntu | — | Upgrade linux-image-nvidia-64kUpgrade linux-image-gcp-64k-6.14Upgrade linux-image-generic-6.8Upgrade linux-image-aws-lts-24.04Upgrade linux-image-aws-fips-6.8Upgrade linux-image-aws-64k-6.14Upgrade linux-image-azureUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-oem-22.04dUpgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-100-fipsUpgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-gcp-fips-6.8Upgrade linux-image-raspi-6.14Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-oracle-64kUpgrade linux-image-intel-iotgUpgrade linux-image-aws-64k-6.8Upgrade linux-image-gkeUpgrade linux-image-realtime-6.8.1Upgrade linux-image-gcp-6.14Upgrade linux-image-gcp-64k-6.8Upgrade linux-image-azure-6.8Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-oem-22.04cUpgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-6.14.0-1020-gcp-64kUpgrade linux-image-virtual-6.8Upgrade linux-image-realtime-hwe-24.04Upgrade linux-image-xilinxUpgrade linux-image-raspiUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-gcp-fipsUpgrade linux-image-generic-6.14Upgrade linux-image-realtime-6.14Upgrade linux-image-6.14.0-36-genericUpgrade linux-image-oracle-6.8Upgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-6.14.0-1016-realtimeUpgrade linux-image-aws-64kUpgrade linux-image-virtual-6.14Upgrade linux-image-gcpUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-gke-6.8Upgrade linux-image-gke-64k-6.8Upgrade linux-image-aws-6.8Upgrade linux-image-kvmUpgrade linux-image-xilinx-6.8Upgrade linux-image-6.14.0-1017-oracleUpgrade linux-image-6.8.0-1046-awsUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-azure-fipsUpgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-generic-64kUpgrade linux-image-oem-24.04Upgrade linux-image-realtimeUpgrade linux-image-fips-6.8Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.14.0-1018-raspiUpgrade linux-image-6.14.0-1017-azureUpgrade linux-image-raspi-realtimeUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-realtime-hwe-22.04Upgrade linux-image-generic-64k-6.8Upgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-6.14.0-1016-oemUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-oem-24.04aUpgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-oem-22.04bUpgrade linux-image-azure-fips-6.8Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-aws-6.14Upgrade linux-image-gcp-64kUpgrade linux-image-6.14.0-1017-oracle-64kUpgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-ibm-6.8Upgrade linux-image-raspi-6.8Upgrade linux-image-ibm-classicUpgrade linux-image-oracleUpgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-oem-22.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-fipsUpgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-nvidiaUpgrade linux-image-lowlatency-6.8Upgrade linux-image-gcp-6.8Upgrade linux-image-aws-fipsUpgrade linux-image-awsUpgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-azure-lts-24.04Upgrade linux-image-generic-64k-6.14Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-6.14.0-36-generic-64kUpgrade linux-image-oem-22.04aUpgrade linux-image-6.8.0-1051-azureUpgrade linux-image-genericUpgrade linux-image-oracle-64k-6.14Upgrade linux-image-6.8.0-1046-azureUpgrade linux-image-nvidia-6.8Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-6.14.0-1017-awsUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-lowlatencyUpgrade linux-image-generic-lpaeUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-oracle-6.14Upgrade linux-image-azure-6.14Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-virtualUpgrade linux-image-gkeop-6.8Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-6.8.0-100-genericUpgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-gke-64kUpgrade linux-image-ibmUpgrade linux-image-6.14.0-1017-aws-64kUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-oracle-64k-6.8Upgrade linux-image-gkeopUpgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-lowlatency-64kUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-6.14.0-1020-gcpUpgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-oem-6.14Upgrade linux-image-generic-64k-hwe-24.04 | Jul 31, 2025 | Jul 28, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Aug 20, 2025 | Jul 28, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub