In the Linux kernel, the following vulnerability has been resolved:
objtool, nvmet: Fix out-of-bounds stack access in nvmet_ctrl_state_show()
The csts_state_names[] array only has six sparse entries, but the iteration code in nvmet_ctrl_state_show() iterates seven, resulting in a potential out-of-bounds stack read. Fix that.
Fixes the following warning with an UBSAN kernel:
vmlinux.o: warning: objtool: .text.nvmet_ctrl_state_show: unexpected end of section
CVSS Details
- CVSS 3.1 Base Score: 7.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 23, 2026 | Jul 23, 2026 |
| Suse | — | Upgrade kernel-sourceUpgrade kernel-source-azureUpgrade kernel-defaultUpgrade kernel-azure-develUpgrade kernel-default-develUpgrade kernel-default-livepatchUpgrade kernel-azureUpgrade kernel-docs-htmlUpgrade kernel-kvmsmall-vdsoUpgrade kernel-source-vanillaUpgrade kernel-64kb-extraUpgrade kernel-azure-extraUpgrade kernel-default-vdsoUpgrade kernel-64kb-develUpgrade kernel-develUpgrade kernel-default-extraUpgrade kernel-kvmsmall-develUpgrade kernel-zfcpdumpUpgrade kernel-kvmsmallUpgrade kernel-docsUpgrade kernel-obs-qaUpgrade kernel-azure-vdsoUpgrade kernel-64kbUpgrade kernel-macrosUpgrade kernel-symsUpgrade kernel-devel-azure | Dec 5, 2025 | Dec 5, 2025 |
| Ubuntu | — | Upgrade linux-image-6.11.0-1015-awsUpgrade linux-image-6.11.0-1018-azure-fdeUpgrade linux-image-oracle-64kUpgrade linux-image-genericUpgrade linux-image-6.11.0-1018-azureUpgrade linux-image-6.14.0-1004-realtimeUpgrade linux-image-6.11.0-1024-oemUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-generic-64kUpgrade linux-image-gcpUpgrade linux-image-oem-24.04bUpgrade linux-image-6.14.0-1007-oracleUpgrade linux-image-6.11.0-1016-gcpUpgrade linux-image-realtimeUpgrade linux-image-virtualUpgrade linux-image-6.11.0-1011-realtimeUpgrade linux-image-6.11.0-1016-gcp-64kUpgrade linux-image-6.14.0-1007-azure-fdeUpgrade linux-image-oracleUpgrade linux-image-6.11.0-1015-lowlatencyUpgrade linux-image-lowlatency-64kUpgrade linux-image-6.14.0-1008-gcp-64kUpgrade linux-image-6.14.0-22-generic-64kUpgrade linux-image-6.11.0-1014-raspiUpgrade linux-image-aws-64kUpgrade linux-image-6.14.0-1007-aws-64kUpgrade linux-image-azure-fdeUpgrade linux-image-raspiUpgrade linux-image-awsUpgrade linux-image-6.11.0-1015-lowlatency-64kUpgrade linux-image-lowlatency-64k-6.11Upgrade linux-image-azure-fde-6.11Upgrade linux-image-lowlatency-6.11Upgrade linux-image-6.14.0-22-genericUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-6.11.0-28-genericUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.14.0-1007-oracle-64kUpgrade linux-image-azure-fde-edgeUpgrade linux-image-azure-6.11Upgrade linux-image-6.14.0-1007-awsUpgrade linux-image-6.14.0-1008-gcpUpgrade linux-image-6.11.0-28-generic-64kUpgrade linux-image-6.11.0-1017-oracleUpgrade linux-image-6.14.0-1007-azureUpgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-azureUpgrade linux-image-6.11.0-1017-oracle-64kUpgrade linux-image-gcp-64kUpgrade linux-image-6.14.0-1007-raspiUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-lowlatency | Jun 26, 2025 | Apr 18, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub