In the Linux kernel, the following vulnerability has been resolved:
tls: wait for pending async decryptions if tls_strp_msg_hold fails
Async decryption calls tls_strp_msg_hold to create a clone of the input skb to hold references to the memory it uses. If we fail to allocate that clone, proceeding with async decryption can lead to various issues (UAF on the skb, writing into userspace memory after the recv() call has returned).
In this case, wait for all pending decryption requests.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-rt-64k-develUpgrade rtlaUpgrade python3-perfUpgrade kernel-rt-coreUpgrade kernel-rt-debugUpgrade kernel-rt-debug-develUpgrade kernel-coreUpgrade kernel-debugUpgrade kernel-64k-debug-coreUpgrade kernel-rt-64k-coreUpgrade kernel-64k-modules-coreUpgrade kernel-develUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-64k-debug-develUpgrade kernel-rt-64k-debugUpgrade kernel-headersUpgrade kernel-debug-develUpgrade kernel-rt-debug-modulesUpgrade perfUpgrade kernel-rt-64k-debug-modules-extraUpgrade kernel-debug-coreUpgrade kernel-rt-64k-debug-modules-coreUpgrade kernel-64k-modulesUpgrade kernel-modules-extraUpgrade kernel-64k-debug-modulesUpgrade kernel-modules-coreUpgrade kernel-debug-uki-virtUpgrade kernel-zfcpdump-develUpgrade kernel-modulesUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-cross-headersUpgrade kernel-rt-develUpgrade kernel-64kUpgrade kernel-64k-develUpgrade kernel-docUpgrade kernel-rtUpgrade kernel-debug-devel-matchedUpgrade kernel-devel-matchedUpgrade kernel-rt-modules-extraUpgrade kernel-rt-64k-debug-modulesUpgrade rvUpgrade kernel-rt-64k-modules-extraUpgrade kernel-rt-debug-coreUpgrade kernel-tools-libs-develUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-rt-modules-coreUpgrade kernel-rt-64kUpgrade kernel-rt-64k-modules-coreUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-debug-modules-coreUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-rt-64k-debug-develUpgrade libperfUpgrade kernel-64k-debug-modules-extraUpgrade kernel-debug-modules-coreUpgrade kernel-zfcpdump-modulesUpgrade kernel-debug-modules-extraUpgrade kernel-64k-modules-extraUpgrade kernel-debug-modulesUpgrade kernel-64k-debug-modules-coreUpgrade kernel-64k-devel-matchedUpgrade kernel-toolsUpgrade kernel-64k-coreUpgrade kernel-rt-64k-modulesUpgrade kernel-64k-debugUpgrade kernel-uki-virt-addonsUpgrade kernel-rt-modulesUpgrade kernel-rt-64k-debug-coreUpgrade kernel-zfcpdump-coreUpgrade kernel-uki-virtUpgrade kernel-abi-stablelistsUpgrade kernel-zfcpdump | Jan 8, 2026 | Dec 16, 2025 |
| Amazon_linux_2023 | — | Upgrade bpftool6.12Upgrade kernel6.12-libbpfUpgrade kernel6.12-libbpf-develUpgrade kernel6.12-libbpf-staticUpgrade perf6.12-debuginfoUpgrade perf-debuginfoUpgrade bpftool6.12-debuginfoUpgrade kernel-modules-extra-commonUpgrade python3-perfUpgrade kernel6.12-modules-extraUpgrade kernel-tools-develUpgrade kernel6.12-debuginfoUpgrade kernel-headersUpgrade python3-perf6.12-debuginfoUpgrade kernel-livepatch-6.12.55-74.119Upgrade kernel-toolsUpgrade perfUpgrade kernel6.12-toolsUpgrade kernel6.12-debuginfo-common-aarch64Upgrade kernel6.12-tools-debuginfoUpgrade kernel-modules-extraUpgrade kernelUpgrade kernel6.12-modules-extra-commonUpgrade kernel6.12-headersUpgrade kernel6.12Upgrade kernel-tools-debuginfoUpgrade bpftoolUpgrade bpftool-debuginfoUpgrade kernel-develUpgrade kernel-libbpf-develUpgrade python3-perf-debuginfoUpgrade kernel6.12-debuginfo-common-x86_64Upgrade kernel-libbpfUpgrade perf6.12Upgrade kernel-libbpf-staticUpgrade kernel-debuginfo-common-x86_64Upgrade kernel6.12-develUpgrade kernel-debuginfoUpgrade python3-perf6.12Upgrade kernel6.12-libbpf-debuginfoUpgrade kernel-livepatch-6.1.158-178.288Upgrade kernel-libbpf-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel6.12-tools-devel | Dec 9, 2025 | Nov 12, 2025 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Nov 14, 2025 | Nov 14, 2025 |
| Oracle_linux | — | Upgrade kernel | Dec 22, 2025 | Nov 12, 2025 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rt | Dec 18, 2025 | Nov 12, 2025 |
| Rocky_linux | — | Upgrade kernelUpgrade kernel-rt-coreUpgrade kernel-modules-extra-matchedUpgrade kernel-debug-devel-matchedUpgrade kernel-debug-modules-coreUpgrade python3-perfUpgrade kernel-rt-debug-coreUpgrade kernel-rt-debug-debuginfoUpgrade kernel-debug-modulesUpgrade kernel-debugUpgrade python3-perf-debuginfoUpgrade kernel-debug-uki-virtUpgrade kernel-rt-modules-extraUpgrade kernel-debuginfoUpgrade kernel-tools-libs-develUpgrade kernel-tools-debuginfoUpgrade kernel-zfcpdump-develUpgrade kernel-rt-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-zfcpdump-debuginfoUpgrade kernel-modules-coreUpgrade kernel-debug-develUpgrade kernel-tools-libsUpgrade rtlaUpgrade kernel-rtUpgrade kernel-uki-virt-addonsUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-devel-matchedUpgrade libperfUpgrade kernel-uki-virtUpgrade kernel-toolsUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-debuginfo-common-s390xUpgrade perf-debuginfoUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-zfcpdump-modulesUpgrade kernel-rt-debug-develUpgrade kernel-zfcpdumpUpgrade kernel-coreUpgrade kernel-rt-debuginfoUpgrade kernel-rt-debug-modules-extraUpgrade kernel-modulesUpgrade kernel-zfcpdump-coreUpgrade kernel-debug-modules-extraUpgrade kernel-debug-coreUpgrade kernel-rt-debug-modulesUpgrade perfUpgrade kernel-rt-debugUpgrade libperf-debuginfoUpgrade kernel-rt-debug-modules-coreUpgrade kernel-debug-debuginfoUpgrade kernel-develUpgrade kernel-rt-modulesUpgrade kernel-rt-modules-coreUpgrade rvUpgrade kernel-modules-extra | Jan 19, 2026 | Jan 17, 2026 |
| Ubuntu | — | Upgrade linux-image-gcpUpgrade linux-image-lowlatency-6.8Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-6.17.0-1008-azureUpgrade linux-image-aws-fipsUpgrade linux-image-generic-6.17Upgrade linux-image-lowlatencyUpgrade linux-image-6.17.0-1007-gcp-64kUpgrade linux-image-6.8.0-1049-ibmUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-6.17.0-1006-realtimeUpgrade linux-image-virtualUpgrade linux-image-azure-fips-6.8Upgrade linux-image-generic-64k-6.8Upgrade linux-image-ibmUpgrade linux-image-ibm-classicUpgrade linux-image-azure-fipsUpgrade linux-image-6.17.0-14-generic-64kUpgrade linux-image-aws-64kUpgrade linux-image-6.17.0-1007-aws-64kUpgrade linux-image-azure-lts-24.04Upgrade linux-image-oem-22.04aUpgrade linux-image-6.17.0-1007-oracleUpgrade linux-image-generic-64kUpgrade linux-image-fipsUpgrade linux-image-aws-64k-6.8Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-6.8.0-1050-aws-64kUpgrade linux-image-6.8.0-1050-raspiUpgrade linux-image-raspi-realtimeUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-generic-lpaeUpgrade linux-image-6.8.0-1048-gke-64kUpgrade linux-image-azure-6.8Upgrade linux-image-generic-6.8Upgrade linux-image-6.8.0-1047-oracleUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-oem-22.04Upgrade linux-image-oem-22.04bUpgrade linux-image-6.8.1-1045-realtimeUpgrade linux-image-ibm-6.8Upgrade linux-image-xilinxUpgrade linux-image-6.8.0-1051-azureUpgrade linux-image-azure-6.17Upgrade linux-image-6.8.0-1052-gcp-64kUpgrade linux-image-6.8.0-1052-gcp-fipsUpgrade linux-image-6.8.0-106-generic-64kUpgrade linux-image-nvidiaUpgrade linux-image-gkeop-6.8Upgrade linux-image-intel-iotgUpgrade linux-image-6.8.0-1050-awsUpgrade linux-image-realtime-hwe-22.04Upgrade linux-image-6.8.0-1035-gkeopUpgrade linux-image-6.8.0-1048-gkeUpgrade linux-image-6.8.0-1049-nvidia-lowlatencyUpgrade linux-image-fips-6.8Upgrade linux-image-oracleUpgrade linux-image-lowlatency-64kUpgrade linux-image-6.17.0-1007-gcpUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-gkeopUpgrade linux-image-6.17.0-1011-oemUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-6.8.0-106-genericUpgrade linux-image-genericUpgrade linux-image-6.8.0-1049-nvidiaUpgrade linux-image-6.8.0-1052-azure-fipsUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-gcp-fipsUpgrade linux-image-raspiUpgrade linux-image-kvmUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-oracle-6.17Upgrade linux-image-aws-lts-24.04Upgrade linux-image-oem-22.04cUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-gke-6.8Upgrade linux-image-aws-fips-6.8Upgrade linux-image-oracle-64k-6.17Upgrade linux-image-raspi-6.17Upgrade linux-image-oracle-64kUpgrade linux-image-gke-64kUpgrade linux-image-azureUpgrade linux-image-6.8.0-1049-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1047-oracle-64kUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-aws-64k-6.17Upgrade linux-image-aws-6.8Upgrade linux-image-awsUpgrade linux-image-6.17.0-1008-raspiUpgrade linux-image-realtime-6.8.1Upgrade linux-image-raspi-6.8Upgrade linux-image-oem-22.04dUpgrade linux-image-gke-64k-6.8Upgrade linux-image-generic-64k-6.17Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-gcp-6.17Upgrade linux-image-6.8.0-106-lowlatency-64kUpgrade linux-image-gcp-64k-6.17Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-realtimeUpgrade linux-image-6.17.0-1007-awsUpgrade linux-image-gcp-64kUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-oem-6.17Upgrade linux-image-nvidia-64kUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-virtual-6.8Upgrade linux-image-nvidia-6.8Upgrade linux-image-intel-iot-realtimeUpgrade linux-image-6.8.0-106-fipsUpgrade linux-image-6.8.0-1052-gcpUpgrade linux-image-6.8.0-1049-nvidia-64kUpgrade linux-image-6.8.0-1029-xilinxUpgrade linux-image-6.17.0-14-genericUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-virtual-6.17Upgrade linux-image-oracle-6.8Upgrade linux-image-gkeUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-aws-6.17Upgrade linux-image-6.8.0-2040-raspi-realtimeUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-gcp-fips-6.8Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-realtime-6.17Upgrade linux-image-xilinx-6.8Upgrade linux-image-6.8.0-106-lowlatencyUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-6.17.0-1007-oracle-64kUpgrade linux-image-gcp-6.8Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.8.0-1050-aws-fips | Feb 13, 2026 | Feb 12, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Feb 9, 2026 | Nov 12, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub