In the Linux kernel, the following vulnerability has been resolved:
objtool, nvmet: Fix out-of-bounds stack access in nvmet_ctrl_state_show()
The csts_state_names[] array only has six sparse entries, but the iteration code in nvmet_ctrl_state_show() iterates seven, resulting in a potential out-of-bounds stack read. Fix that.
Fixes the following warning with an UBSAN kernel:
vmlinux.o: warning: objtool: .text.nvmet_ctrl_state_show: unexpected end of section
CVSS Details
- CVSS 3.1 Base Score: 7.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 23, 2026 | Jul 23, 2026 |
| Suse | — | Upgrade kernel-kvmsmall-vdsoUpgrade kernel-docs-htmlUpgrade kernel-default-develUpgrade kernel-defaultUpgrade kernel-default-vdsoUpgrade kernel-source-azureUpgrade kernel-sourceUpgrade kernel-source-vanillaUpgrade kernel-azure-extraUpgrade kernel-azureUpgrade kernel-64kb-extraUpgrade kernel-default-livepatchUpgrade kernel-azure-develUpgrade kernel-kvmsmallUpgrade kernel-64kb-develUpgrade kernel-zfcpdumpUpgrade kernel-docsUpgrade kernel-symsUpgrade kernel-macrosUpgrade kernel-develUpgrade kernel-kvmsmall-develUpgrade kernel-obs-qaUpgrade kernel-devel-azureUpgrade kernel-azure-vdsoUpgrade kernel-64kbUpgrade kernel-default-extra | Dec 5, 2025 | Dec 5, 2025 |
| Ubuntu | — | Upgrade linux-image-lowlatency-64k-6.11Upgrade linux-image-lowlatencyUpgrade linux-image-raspiUpgrade linux-image-6.14.0-1008-gcpUpgrade linux-image-azure-6.11Upgrade linux-image-6.14.0-1007-awsUpgrade linux-image-6.11.0-28-generic-64kUpgrade linux-image-azure-fdeUpgrade linux-image-6.14.0-1007-aws-64kUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-azureUpgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-gcp-64kUpgrade linux-image-6.11.0-1017-oracle-64kUpgrade linux-image-azure-fde-6.11Upgrade linux-image-6.14.0-1007-raspiUpgrade linux-image-6.11.0-1015-lowlatency-64kUpgrade linux-image-6.11.0-28-genericUpgrade linux-image-6.14.0-1007-oracle-64kUpgrade linux-image-azure-fde-edgeUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-awsUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-6.11.0-1017-oracleUpgrade linux-image-6.14.0-22-genericUpgrade linux-image-lowlatency-6.11Upgrade linux-image-6.14.0-1007-azureUpgrade linux-image-6.14.0-1008-gcp-64kUpgrade linux-image-6.14.0-1007-azure-fdeUpgrade linux-image-oracleUpgrade linux-image-genericUpgrade linux-image-6.11.0-1015-awsUpgrade linux-image-generic-64kUpgrade linux-image-6.11.0-1018-azure-fdeUpgrade linux-image-6.11.0-1018-azureUpgrade linux-image-6.11.0-1024-oemUpgrade linux-image-oem-24.04bUpgrade linux-image-gcpUpgrade linux-image-6.14.0-1004-realtimeUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-aws-64kUpgrade linux-image-6.14.0-22-generic-64kUpgrade linux-image-6.11.0-1014-raspiUpgrade linux-image-6.11.0-1016-gcp-64kUpgrade linux-image-lowlatency-64kUpgrade linux-image-6.11.0-1011-realtimeUpgrade linux-image-6.11.0-1016-gcpUpgrade linux-image-6.11.0-1015-lowlatencyUpgrade linux-image-virtualUpgrade linux-image-realtimeUpgrade linux-image-oracle-64kUpgrade linux-image-6.14.0-1007-oracle | Jun 26, 2025 | Apr 18, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub