In the Linux kernel, the following vulnerability has been resolved:
nvme-tcp: fix potential memory corruption in nvme_tcp_recv_pdu()
nvme_tcp_recv_pdu() doesn't check the validity of the header length. When header digests are enabled, a target might send a packet with an invalid header length (e.g. 255), causing nvme_tcp_verify_hdgst() to access memory outside the allocated area and cause memory corruptions by overwriting it with the calculated digest.
Fix this by rejecting packets with an unexpected header length.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-64k-debug-modules-extraUpgrade kernel-docUpgrade kernel-coreUpgrade rvUpgrade kernel-64k-develUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-64k-modules-extraUpgrade kernel-uki-virtUpgrade kernel-rt-modulesUpgrade kernel-debugUpgrade kernel-uki-virt-addonsUpgrade kernel-rt-debug-kvmUpgrade kernel-debug-devel-matchedUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-debug-modules-coreUpgrade kernel-zfcpdumpUpgrade kernel-debug-uki-virtUpgrade kernel-rt-debug-develUpgrade perfUpgrade kernel-zfcpdump-coreUpgrade kernel-rt-modules-coreUpgrade libperfUpgrade kernel-modules-extraUpgrade kernel-64k-debugUpgrade kernel-develUpgrade kernel-64k-debug-modulesUpgrade kernel-debug-modules-extraUpgrade kernel-toolsUpgrade kernel-zfcpdump-modulesUpgrade kernel-64k-debug-develUpgrade kernel-debug-coreUpgrade kernel-rt-64k-modules-coreUpgrade kernel-debug-modules-coreUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-zfcpdump-develUpgrade kernel-modulesUpgrade kernel-modules-coreUpgrade kernel-rtUpgrade kernel-devel-matchedUpgrade kernel-rt-debug-modulesUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-64k-debug-modules-coreUpgrade kernel-rt-64k-modules-extraUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-rt-modules-extraUpgrade kernel-rt-64k-coreUpgrade kernel-rt-64k-debug-develUpgrade kernel-rt-64k-debugUpgrade kernel-rt-develUpgrade kernel-rt-64k-debug-modules-extraUpgrade kernel-64k-modules-coreUpgrade kernel-rt-64k-debug-modulesUpgrade kernel-rt-64kUpgrade kernel-rt-debugUpgrade kernel-64k-coreUpgrade kernel-tools-libsUpgrade kernel-rt-kvmUpgrade kernel-rt-64k-debug-modules-coreUpgrade kernelUpgrade kernel-rt-64k-develUpgrade kernel-debug-modulesUpgrade python3-perfUpgrade kernel-cross-headersUpgrade kernel-rt-coreUpgrade kernel-64k-devel-matchedUpgrade kernel-64k-modulesUpgrade kernel-rt-debug-coreUpgrade kernel-64k-debug-coreUpgrade kernel-debug-develUpgrade kernel-headersUpgrade kernel-tools-libs-develUpgrade kernel-rt-64k-debug-coreUpgrade kernel-64kUpgrade rtlaUpgrade kernel-rt-64k-modulesUpgrade kernel-abi-stablelists | May 27, 2025 | Apr 1, 2025 |
| Amazon Linux Ami 2 | — | Upgrade perf-debuginfoUpgrade kernel-headersUpgrade kernel-livepatch-5.10.237-230.949Upgrade kernel-debuginfo-common-x86_64Upgrade bpftool-debuginfoUpgrade python-perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-tools-develUpgrade perfUpgrade kernel-debuginfoUpgrade bpftoolUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-toolsUpgrade kernelUpgrade kernel-develUpgrade python-perfUpgrade kernel-livepatch-5.15.184-125.190 | May 30, 2025 | Apr 1, 2025 |
| Amazon_linux_2023 | — | Upgrade kernel-livepatch-6.1.131-143.221Upgrade kernel-livepatch-6.1.134-150.224Upgrade kernel-livepatch-6.1.132-147.221Upgrade kernel-livepatch-6.1.134-152.225Upgrade kernel-livepatch-6.1.130-139.222 | Jul 4, 2025 | Apr 1, 2025 |
| Debian | — | Upgrade linuxNo solution exists | May 15, 2025 | Apr 1, 2025 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade kernelUpgrade kernel-toolsUpgrade bpftoolUpgrade kernel-tools-libs | Jun 13, 2025 | Apr 1, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade python3-perfUpgrade bpftoolUpgrade kernel-tools-libsUpgrade kernel | Jul 21, 2025 | Apr 1, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade kernelUpgrade kernel-abi-stablelistsUpgrade bpftoolUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade python3-perf | Jul 1, 2025 | Apr 1, 2025 |
| Oracle_linux | — | Upgrade kernel | May 2, 2025 | Apr 1, 2025 |
| Redhat_linux | — | Upgrade kernelNo solution existsUpgrade kernel-rt | May 1, 2025 | Apr 1, 2025 |
| Rocky_linux | — | Upgrade kernel-toolsUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-rt-modulesUpgrade kernel-debug-modules-extraUpgrade libperfUpgrade kernel-zfcpdump-coreUpgrade kernel-rt-debug-modules-coreUpgrade kernel-rt-modules-coreUpgrade kernel-rtUpgrade rvUpgrade kernel-rt-modules-extraUpgrade kernel-debug-devel-matchedUpgrade libperf-debuginfoUpgrade kernel-zfcpdump-modulesUpgrade kernel-devel-matchedUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-tools-libs-develUpgrade kernel-rt-debuginfoUpgrade kernel-uki-virt-addonsUpgrade kernel-uki-virtUpgrade rtlaUpgrade kernel-rt-develUpgrade kernel-rt-debug-coreUpgrade perfUpgrade kernel-develUpgrade kernel-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-modules-extraUpgrade kernel-rt-debug-modulesUpgrade kernel-zfcpdump-debuginfoUpgrade kernel-rt-debug-debuginfoUpgrade kernel-modulesUpgrade kernel-zfcpdumpUpgrade python3-perfUpgrade kernel-zfcpdump-develUpgrade kernel-headersUpgrade kernel-debug-modules-coreUpgrade kernel-debug-modulesUpgrade kernelUpgrade perf-debuginfoUpgrade kernel-debugUpgrade kernel-cross-headersUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-debug-uki-virtUpgrade bpftool-debuginfoUpgrade python3-perf-debuginfoUpgrade kernel-tools-libsUpgrade kernel-modules-coreUpgrade kernel-debug-develUpgrade kernel-rt-debugUpgrade kernel-rt-coreUpgrade kernel-rt-debug-develUpgrade kernel-rt-debug-kvmUpgrade kernel-debug-coreUpgrade kernel-coreUpgrade bpftoolUpgrade kernel-rt-kvmUpgrade kernel-rt-debug-modules-extraUpgrade kernel-debug-debuginfo | Jul 31, 2025 | Jul 29, 2025 |
| Suse | — | Upgrade kernel-source-azureUpgrade dtb-apmUpgrade kselftests-kmp-defaultUpgrade dtb-armUpgrade dtb-qcomUpgrade dtb-exynosUpgrade kernel-azure-vdsoUpgrade kernel-symsUpgrade dtb-socionextUpgrade kernel-syms-azureUpgrade kernel-zfcpdumpUpgrade kernel-azure-extraUpgrade kernel-devel-azureUpgrade kernel-64kbUpgrade reiserfs-kmp-rtUpgrade ocfs2-kmp-rtUpgrade kernel-macrosUpgrade kernel-default-base-rebuildUpgrade dtb-amazonUpgrade dtb-amlogicUpgrade kernel-rt-vdsoUpgrade kernel-rt_debugUpgrade kernel-kvmsmallUpgrade dtb-marvellUpgrade kernel-default-extraUpgrade dlm-kmp-defaultUpgrade cluster-md-kmp-defaultUpgrade kernel-rtUpgrade kernel-azure-develUpgrade gfs2-kmp-64kbUpgrade gfs2-kmp-rtUpgrade kernel-obs-qaUpgrade dlm-kmp-azureUpgrade kernel-syms-rtUpgrade kernel-rt-livepatch-develUpgrade kernel-sourceUpgrade kernel-rt_debug-vdsoUpgrade kernel-default-manUpgrade cluster-md-kmp-azureUpgrade kernel-default-develUpgrade kernel-docsUpgrade kernel-kvmsmall-vdsoUpgrade kernel-kvmsmall-develUpgrade kernel-docs-htmlUpgrade reiserfs-kmp-azureUpgrade dtb-broadcomUpgrade dtb-appleUpgrade dtb-amdUpgrade ocfs2-kmp-defaultUpgrade dtb-allwinnerUpgrade reiserfs-kmp-64kbUpgrade kselftests-kmp-64kbUpgrade dtb-xilinxUpgrade dtb-renesasUpgrade kernel-azure-optionalUpgrade ocfs2-kmp-azureUpgrade kernel-default-vdsoUpgrade ocfs2-kmp-64kbUpgrade kernel-rt_debug-develUpgrade kernel-default-optionalUpgrade dtb-lgUpgrade kernel-source-rtUpgrade kernel-devel-rtUpgrade kernel-default-livepatch-develUpgrade dtb-rockchipUpgrade kernel-64kb-extraUpgrade kernel-debug-vdsoUpgrade kernel-debugUpgrade dtb-nvidiaUpgrade dtb-freescaleUpgrade dtb-caviumUpgrade dlm-kmp-64kbUpgrade kselftests-kmp-rtUpgrade kselftests-kmp-azureUpgrade kernel-develUpgrade kernel-source-vanillaUpgrade kernel-defaultUpgrade kernel-rt-optionalUpgrade kernel-64kb-develUpgrade reiserfs-kmp-defaultUpgrade kernel-obs-buildUpgrade kernel-debug-develUpgrade kernel-azureUpgrade dtb-sprdUpgrade dtb-mediatekUpgrade kernel-default-baseUpgrade kernel-64kb-optionalUpgrade dtb-alteraUpgrade dlm-kmp-rtUpgrade cluster-md-kmp-64kbUpgrade kernel-rt-extraUpgrade kernel-default-livepatchUpgrade gfs2-kmp-defaultUpgrade gfs2-kmp-azureUpgrade cluster-md-kmp-rtUpgrade kernel-rt-develUpgrade dtb-hisilicon | Dec 5, 2025 | May 6, 2025 |
| Ubuntu | — | Upgrade linux-image-azure-fde-6.11Upgrade linux-image-virtual-6.8Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-gcp-6.8Upgrade linux-image-azure-lts-24.04Upgrade linux-image-ibmUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-raspi-6.8Upgrade linux-image-oracle-6.8Upgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-lowlatency-6.11Upgrade linux-image-ibm-6.8Upgrade linux-image-aws-64k-6.8Upgrade linux-image-ibm-classicUpgrade linux-image-azure-6.11Upgrade linux-image-6.8.0-85-generic-64kUpgrade linux-image-oem-22.04bUpgrade linux-image-kvmUpgrade linux-image-6.8.0-1037-oracleUpgrade linux-image-6.8.0-1039-nvidia-64kUpgrade linux-image-6.8.0-1039-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1036-gke-64kUpgrade linux-image-6.11.0-28-generic-64kUpgrade linux-image-6.11.0-1018-azure-fdeUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-realtime-hwe-22.04Upgrade linux-image-realtimeUpgrade linux-image-lowlatency-64k-6.11Upgrade linux-image-6.8.0-1023-gkeopUpgrade linux-image-6.11.0-1015-lowlatency-64kUpgrade linux-image-6.11.0-1016-gcpUpgrade linux-image-nvidia-64kUpgrade linux-image-generic-6.8Upgrade linux-image-azure-fde-edgeUpgrade linux-image-gcpUpgrade linux-image-6.11.0-1016-gcp-64kUpgrade linux-image-6.11.0-1015-lowlatencyUpgrade linux-image-6.8.0-1025-azure-nvidiaUpgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-6.8.0-1039-awsUpgrade linux-image-6.11.0-1018-azureUpgrade linux-image-gke-64k-6.8Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.8.0-1037-ibmUpgrade linux-image-oracleUpgrade linux-image-raspiUpgrade linux-image-oracle-64kUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-azure-fdeUpgrade linux-image-6.8.0-84-generic-64kUpgrade linux-image-6.11.0-1017-oracle-64kUpgrade linux-image-aws-lts-24.04Upgrade linux-image-raspi-realtimeUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-6.8.0-84-lowlatencyUpgrade linux-image-gke-64kUpgrade linux-image-6.8.0-1039-aws-64kUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-6.8.0-84-genericUpgrade linux-image-6.8.0-1040-gcpUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-generic-64k-6.8Upgrade linux-image-azure-nvidiaUpgrade linux-image-6.11.0-28-genericUpgrade linux-image-awsUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-6.8.0-1038-azure-fdeUpgrade linux-image-nvidiaUpgrade linux-image-azure-fde-6.8Upgrade linux-image-virtualUpgrade linux-image-gke-6.8Upgrade linux-image-generic-lpaeUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-6.8.0-1040-gcp-64kUpgrade linux-image-6.8.0-2031-raspi-realtimeUpgrade linux-image-azureUpgrade linux-image-oem-22.04Upgrade linux-image-oem-24.04bUpgrade linux-image-6.11.0-1014-raspiUpgrade linux-image-oem-22.04aUpgrade linux-image-6.8.0-1036-azure-fdeUpgrade linux-image-6.8.0-1036-azureUpgrade linux-image-lowlatency-6.8Upgrade linux-image-6.8.0-1037-oracle-64kUpgrade linux-image-6.8.0-1039-nvidia-lowlatencyUpgrade linux-image-azure-6.8Upgrade linux-image-lowlatencyUpgrade linux-image-gkeop-6.8Upgrade linux-image-oracle-64k-6.8Upgrade linux-image-6.8.1-1034-realtimeUpgrade linux-image-gcp-64kUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-6.8.0-85-genericUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-6.11.0-1011-realtimeUpgrade linux-image-6.8.0-1038-azureUpgrade linux-image-6.8.0-1039-raspiUpgrade linux-image-6.11.0-1015-awsUpgrade linux-image-aws-6.8Upgrade linux-image-genericUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-oem-22.04cUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-generic-64kUpgrade linux-image-realtime-6.8.1Upgrade linux-image-azure-nvidia-6.8Upgrade linux-image-6.8.0-1036-gkeUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-gkeUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-oem-22.04dUpgrade linux-image-nvidia-6.8Upgrade linux-image-azure-nvidia-lts-24.04Upgrade linux-image-aws-64kUpgrade linux-image-6.8.0-1039-nvidiaUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-gkeopUpgrade linux-image-6.11.0-1024-oemUpgrade linux-image-6.8.0-84-lowlatency-64kUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-6.11.0-1017-oracle | Jun 26, 2025 | Apr 1, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub