In the Linux kernel, the following vulnerability has been resolved:
objtool, nvmet: Fix out-of-bounds stack access in nvmet_ctrl_state_show()
The csts_state_names[] array only has six sparse entries, but the iteration code in nvmet_ctrl_state_show() iterates seven, resulting in a potential out-of-bounds stack read. Fix that.
Fixes the following warning with an UBSAN kernel:
vmlinux.o: warning: objtool: .text.nvmet_ctrl_state_show: unexpected end of section
CVSS Details
- CVSS 3.1 Base Score: 7.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 23, 2026 | Jul 23, 2026 |
| Suse | — | Upgrade kernel-default-livepatchUpgrade kernel-azureUpgrade kernel-source-vanillaUpgrade kernel-azure-develUpgrade kernel-kvmsmall-vdsoUpgrade kernel-source-azureUpgrade kernel-defaultUpgrade kernel-sourceUpgrade kernel-default-develUpgrade kernel-default-vdsoUpgrade kernel-docs-htmlUpgrade kernel-64kb-extraUpgrade kernel-azure-extraUpgrade kernel-devel-azureUpgrade kernel-64kb-develUpgrade kernel-default-extraUpgrade kernel-azure-vdsoUpgrade kernel-docsUpgrade kernel-obs-qaUpgrade kernel-kvmsmallUpgrade kernel-develUpgrade kernel-64kbUpgrade kernel-zfcpdumpUpgrade kernel-kvmsmall-develUpgrade kernel-symsUpgrade kernel-macros | Dec 5, 2025 | Dec 5, 2025 |
| Ubuntu | — | Upgrade linux-image-6.11.0-1016-gcp-64kUpgrade linux-image-6.11.0-1011-realtimeUpgrade linux-image-6.11.0-1015-lowlatencyUpgrade linux-image-lowlatency-64kUpgrade linux-image-6.11.0-1014-raspiUpgrade linux-image-6.14.0-1007-azure-fdeUpgrade linux-image-gcpUpgrade linux-image-oracle-64kUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-realtimeUpgrade linux-image-6.14.0-1004-realtimeUpgrade linux-image-aws-64kUpgrade linux-image-oem-24.04bUpgrade linux-image-virtualUpgrade linux-image-generic-64kUpgrade linux-image-genericUpgrade linux-image-6.11.0-1015-awsUpgrade linux-image-6.11.0-1016-gcpUpgrade linux-image-6.14.0-1008-gcp-64kUpgrade linux-image-6.14.0-22-generic-64kUpgrade linux-image-6.14.0-1007-oracleUpgrade linux-image-6.11.0-1024-oemUpgrade linux-image-oracleUpgrade linux-image-6.11.0-1018-azure-fdeUpgrade linux-image-6.11.0-1018-azureUpgrade linux-image-6.11.0-1015-lowlatency-64kUpgrade linux-image-lowlatency-64k-6.11Upgrade linux-image-6.14.0-1007-aws-64kUpgrade linux-image-azureUpgrade linux-image-lowlatencyUpgrade linux-image-6.14.0-22-genericUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-6.11.0-1017-oracleUpgrade linux-image-awsUpgrade linux-image-6.14.0-1007-oracle-64kUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-azure-fde-edgeUpgrade linux-image-6.11.0-28-genericUpgrade linux-image-6.14.0-1007-azureUpgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-azure-fdeUpgrade linux-image-azure-6.11Upgrade linux-image-6.14.0-1008-gcpUpgrade linux-image-raspiUpgrade linux-image-6.14.0-1007-awsUpgrade linux-image-6.11.0-28-generic-64kUpgrade linux-image-azure-fde-6.11Upgrade linux-image-6.14.0-1007-raspiUpgrade linux-image-6.11.0-1017-oracle-64kUpgrade linux-image-lowlatency-6.11Upgrade linux-image-gcp-64kUpgrade linux-image-generic-hwe-24.04 | Jun 26, 2025 | Apr 18, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub