Description
In the Linux kernel, the following vulnerability has been resolved:
netconsole: avoid OOB reads, msg is not nul-terminated
msg passed to netconsole from the console subsystem is not guaranteed
to be nul-terminated. Before recent
commit 7eab73b18630 ("netconsole: convert to NBCON console infrastructure")
the message would be placed in printk_shared_pbufs, a static global
buffer, so KASAN had harder time catching OOB accesses. Now we see:
printk: console [netcon_ext0] enabled
BUG: KASAN: slab-out-of-bounds in string+0x1f7/0x240
Read of size 1 at addr ffff88813b6d4c00 by task pr/netcon_ext0/594
CPU: 65 UID: 0 PID: 594 Comm: pr/netcon_ext0 Not tainted 6.19.0-11754-g4246fd6547c9
Call Trace:
kasan_report+0xe4/0x120
string+0x1f7/0x240
vsnprintf+0x655/0xba0
scnprintf+0xba/0x120
netconsole_write+0x3fe/0xa10
nbcon_emit_next_record+0x46e/0x860
nbcon_kthread_func+0x623/0x750
Allocated by task 1:
nbcon_alloc+0x1ea/0x450
register_console+0x26b/0xe10
init_netconsole+0xbb0/0xda0
The buggy address belongs to the object at ffff88813b6d4000
which belongs to the cache kmalloc-4k of size 4096
The buggy address is located 0 bytes to the right of
allocated 3072-byte region [ffff88813b6d4000, ffff88813b6d4c00)
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Linux | Linux | 6.6 | 6.6.160 |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | linux | 6.19.6-1 | — |
| Debian 13 | linux | 6.12.105-1 | — |
| Debian 12 | linux-6.12 | 6.12.107-1~deb12u1 | — |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu Nvidia-BlueField 24.04 LTS | linux-bluefield | 6.8.0-1028.33 | — |
| Ubuntu 25.10 | linux | 6.17.0-40.40 | USN-8490-1 |
| Ubuntu 25.10 | linux-aws | 6.17.0-1019.19 | USN-8490-1 |
| Ubuntu 25.10 | linux-azure +1 | No fix yet | — |
| Ubuntu 25.10 | linux-gcp | 6.17.0-1020.22 | USN-8490-1 |
| Ubuntu 25.10 | linux-oracle | 6.17.0-1018.18 | USN-8490-1 |
| Ubuntu 25.10 | linux-raspi | 6.17.0-1021.21 | USN-8546-1 |
| Ubuntu 25.10 | linux-realtime | 6.17.0-1017.19 | USN-8490-2 |
| Ubuntu 25.10 | linux-riscv | 6.17.0-40.40.1 | — |
| Ubuntu 24.04 LTS | linux | 6.8.0-137.137 | USN-8630-1 |
| Ubuntu 24.04 LTS | linux-aws | 6.8.0-1062.65 | USN-8630-1 |
| Ubuntu 24.04 LTS | linux-aws-6.17 | 6.17.0-1019.19~24.04.1 | USN-8490-1 |
| Ubuntu 24.04 LTS | linux-azure | 6.8.0-1064.72 | USN-8630-1 |
| Ubuntu 24.04 LTS | linux-azure-6.17 | 6.17.0-1021.21~24.04.1 | USN-8604-1 |
| Ubuntu 24.04 LTS | linux-azure-fde | 6.8.0-1063.70 | USN-8630-1 |
| Ubuntu 24.04 LTS | linux-gcp | 6.8.0-1065.73 | USN-8630-1 |
| Ubuntu 24.04 LTS | linux-gcp-6.17 | 6.17.0-1020.22~24.04.1 | USN-8490-1 |
| Ubuntu 24.04 LTS | linux-gke | 6.8.0-1060.68 | USN-8630-1 |
| Ubuntu 24.04 LTS | linux-gkeop | 6.8.0-1047.51 | USN-8630-1 |
| Ubuntu 24.04 LTS | linux-hwe-6.17 | 6.17.0-40.40~24.04.1 | USN-8545-1 |
| Ubuntu 24.04 LTS | linux-ibm | 6.8.0-1062.63 | USN-8630-1 |
| Ubuntu 24.04 LTS | linux-lowlatency | 6.8.0-137.137.1 | USN-8630-2 |
| Ubuntu 24.04 LTS | linux-nvidia | 6.8.0-1060.63 | USN-8630-1 |
| Ubuntu 24.04 LTS | linux-nvidia-6.17 | 6.17.0-1026.26 | USN-8508-1 |
| Ubuntu 24.04 LTS | linux-nvidia-lowlatency | 6.8.0-1060.63.1 | USN-8630-1 |
| Ubuntu 24.04 LTS | linux-nvidia-tegra | 6.8.0-1031.32 | USN-8630-2 |
| Ubuntu 24.04 LTS | linux-oem-6.17 | 6.17.0-1028.28 | USN-8491-1 |
| Ubuntu 24.04 LTS | linux-oracle | 6.8.0-1059.62 | USN-8630-2 |
| Ubuntu 24.04 LTS | linux-oracle-6.17 +1 | 6.17.0-1018.18~24.04.1 | USN-8605-1, USN-8490-1 |
| Ubuntu 24.04 LTS | linux-raspi | 6.8.0-1062.66 | USN-8630-5 |
| Ubuntu 24.04 LTS | linux-riscv +20 | No fix yet | — |
| Ubuntu 24.04 LTS | linux-vmware | 6.8.0-1008.8 | — |
| Ubuntu 24.04 LTS | linux-xilinx | 6.8.0-1034.35 | USN-8630-1 |
| Ubuntu 22.04 LTS | linux-aws-6.8 | 6.8.0-1062.65~22.04.2 | USN-8630-4 |
| Ubuntu 22.04 LTS | linux-azure-6.8 | 6.8.0-1064.72~22.04.1 | USN-8630-1 |
| Ubuntu 22.04 LTS | linux-azure-fde-6.8 | 6.8.0-1063.70~22.04.1 | USN-8630-1 |
| Ubuntu 22.04 LTS | linux-gcp-6.8 | 6.8.0-1065.73~22.04.1 | USN-8630-1 |
| Ubuntu 22.04 LTS | linux-hwe-6.8 | 6.8.0-138.138~22.04.1 | USN-8656-1 |
| Ubuntu 22.04 LTS | linux-ibm-6.8 | 6.8.0-1062.63~22.04.1 | USN-8630-1 |
| Ubuntu 22.04 LTS | linux-lowlatency-hwe-6.8 | 6.8.0-137.137.1~22.04.1 | USN-8630-2 |
| Ubuntu 22.04 LTS | linux-nvidia-6.8 | 6.8.0-1060.63~22.04.1 | USN-8630-1 |
| Ubuntu 22.04 LTS | linux-oracle-6.8 | 6.8.0-1059.62~22.04.1 | USN-8630-3 |
| Ubuntu 22.04 LTS | linux-riscv +32 | No fix yet | — |
| Ubuntu 22.04 LTS | linux-riscv-6.8 | 6.8.0-137.137~22.04.1 | — |
| Ubuntu 20.04 LTS | linux-gke +28 | No fix yet | — |
Show 5 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 18.04 LTS | linux-gcp +14 | No fix yet | — |
| Ubuntu 16.04 LTS | linux-hwe-edge | No fix yet | — |
| Ubuntu Pro Realtime 24.04 LTS | linux-raspi-realtime | 6.8.0-2051.53 | USN-8630-5 |
| Ubuntu Pro Realtime 24.04 LTS | linux-realtime | 6.8.1-1057.58 | USN-8630-1 |
| Ubuntu Pro Realtime 24.04 LTS | linux-realtime-6.14 | No fix yet | — |
| Ubuntu Pro Realtime 24.04 LTS | linux-realtime-6.17 | 6.17.0-1017.19~24.04.1 | USN-8490-2 |
| Ubuntu Pro Realtime 22.04 LTS | linux-realtime-6.8 | 6.8.1-1057.58~22.04.1 | USN-8630-1 |
| Ubuntu Pro FIPS-updates 24.04 LTS | linux-aws-fips | 6.8.0-1062.65+fips1 | USN-8630-1 |
| Ubuntu Pro FIPS-updates 24.04 LTS | linux-azure-fips | 6.8.0-1064.72+fips1 | USN-8630-1 |
| Ubuntu Pro FIPS-updates 24.04 LTS | linux-fips | 6.8.0-137.137+fips1 | USN-8630-1 |
| Ubuntu Pro FIPS-updates 24.04 LTS | linux-gcp-fips | 6.8.0-1065.73+fips1 | USN-8630-1 |
SUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES for SAP 16.0 | kernel-64kb +8 | 6.12.0-160000.35.1 | SUSE-SU-2026:22127-1 |
| SLES for SAP 16.0 | kernel-default-base | 6.12.0-160000.35.1.160000.2.16 | SUSE-SU-2026:22127-1 |
| SLES 16.0 | kernel-64kb +8 | 6.12.0-160000.35.1 | SUSE-SU-2026:22127-1, SUSE-SU-2026:22099-1 |
| SLES 16.0 | kernel-default-base | 6.12.0-160000.35.1.160000.2.16 | SUSE-SU-2026:22127-1 |
| SLE Micro 6.2 | kernel-default-base | 6.12.0-160000.35.1.160000.2.16 | SUSE-SU-2026:22112-1 |
| SLE Micro 6.2 | kernel-rt +5 | 6.12.0-160000.35.1 | SUSE-SU-2026:22117-1, SUSE-SU-2026:22112-1 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Leap 16.0 | kernel-default-base | 6.12.0-160000.35.1.160000.2.16 | openSUSE-SU-2026:20965-1 |
| openSUSE Leap 16.0 | kernel-rt +11 | 6.12.0-160000.35.1 | openSUSE-SU-2026:20965-1 |
Azure Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Azure Linux 3 | kernel | No fix yet | — |
Oracle Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Oracle Linux 9 | kernel-uek +34 | 6.12.0-206.104.3.3.el10uek | ELSA-2026-500374, ELSA-2026-500248 |
Advisories 22
- WID-SEC-2026-1405 Linux Kernel: Mehrere Schwachstellen BSI CERT-Bund (WID) · Nov 12, 2026
- USN-8604-1 linux-azure-6.17 vulnerabilities Ubuntu Security Notices (USN) · Nov 7, 2026
- USN-8490-2 linux-realtime, linux-realtime-6.17 vulnerabilities Ubuntu Security Notices (USN) · Nov 7, 2026
- USN-8508-1 linux-nvidia-6.17 vulnerabilities Ubuntu Security Notices (USN) · Nov 7, 2026
- USN-8546-1 linux-raspi vulnerabilities Ubuntu Security Notices (USN) · Nov 7, 2026
- USN-8491-1 linux-oem-6.17 vulnerabilities Ubuntu Security Notices (USN) · Nov 7, 2026
- USN-8545-1 linux-hwe-6.17 vulnerabilities Ubuntu Security Notices (USN) · Nov 7, 2026
- USN-8490-1 linux, linux-aws, linux-aws-6.17, linux-gcp, linux-gcp-6.17, linux-oracle, linux-oracle-6.17 vulnerabilities Ubuntu Security Notices (USN) · Nov 7, 2026
- USN-8605-1 linux-azure-fde-6.17 vulnerabilities Ubuntu Security Notices (USN) · Oct 17, 2026
- USN-8630-1 linux, linux-aws, linux-aws-fips, linux-azure, linux-azure-6.8, linux-azure-fde, linux-azure-fde-6.8, linux-azure-fips, linux-fips, linux-gcp, linux-gcp-6.8, linux-gcp-fips, linux-gke, linux-gkeop, linux-ibm, linux-ibm-6.8, linux-nvidia, linux-nvidia-6.8, linux-nvidia-lowlatency, linux-realtime, linux-realtime-6.8, linux-xilinx vulnerabilities Ubuntu Security Notices (USN) · Oct 8, 2026
- ELSA-2026-500374 Important: Unbreakable Enterprise kernel security update (Oracle Linux 9) Oracle Linux Security Advisories (ELSA) · Oct 7, 2026
- USN-8630-3 linux-oracle-6.8 vulnerabilities Ubuntu Security Notices (USN) · Sep 11, 2026
- USN-8630-4 linux-aws-6.8 vulnerabilities Ubuntu Security Notices (USN) · Sep 11, 2026
- USN-8630-5 linux-raspi, linux-raspi-realtime vulnerabilities Ubuntu Security Notices (USN) · Sep 11, 2026
- USN-8630-2 linux-lowlatency, linux-lowlatency-hwe-6.8, linux-nvidia-tegra, linux-oracle vulnerabilities Ubuntu Security Notices (USN) · Sep 11, 2026
- USN-8656-1 linux-hwe-6.8 vulnerabilities Ubuntu Security Notices (USN) · Sep 11, 2026
- ELSA-2026-500248 Important: Unbreakable Enterprise kernel security update (Oracle Linux 9) Oracle Linux Security Advisories (ELSA) · Sep 4, 2026
- SUSE-SU-2026:22117-1 Security update for the Linux Kernel SUSE / openSUSE Security Updates · Jul 9, 2026
- openSUSE-SU-2026:20965-1 Security update for the Linux Kernel SUSE / openSUSE Security Updates · Jun 24, 2026
- SUSE-SU-2026:22127-1 Security update for the Linux Kernel SUSE / openSUSE Security Updates · Jun 17, 2026
- SUSE-SU-2026:22112-1 Security update for the Linux Kernel SUSE / openSUSE Security Updates · Jun 17, 2026
- SUSE-SU-2026:22099-1 Security update for the Linux Kernel SUSE / openSUSE Security Updates · Jun 17, 2026
References
- https://git.kernel.org/stable/c/68fe91df6ea822dae772fceaad0686e4f5839aec
- https://git.kernel.org/stable/c/8fe132c4873f9eb1b86ddbf31216e9d961a0b8b9
- https://git.kernel.org/stable/c/3126a2f98beaec5a554a1fb31c46db1e8542665e
- https://git.kernel.org/stable/c/74ab1456eaa3b2eb986138f9e1f4cb37e73b6f58
- https://git.kernel.org/stable/c/82aec772fca2223bc5774bd9af486fd95766e578