Memory Corruption Vulnerability in Linux Kernel: nvme-tcp Package
Summary
DEBIAN-CVE-2025-21927: In the Linux kernel, the following vulnerability has been resolved: nvme-tcp: fix potential memory corruption in nvme_tcp_recv_pdu() nvme_tcp_recv_pdu() doesn't check the validity of the header length. Affects linux versions < 6.12.19-1. Fixed in 6.12.19-1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
The Linux kernel is the core component of many operating systems, responsible for managing hardware resources and providing essential services to software applications. The nvme-tcp package facilitates communication between NVMe devices over TCP, enhancing storage performance and efficiency. However, it is susceptible to vulnerabilities that can lead to severe security risks, including memory corruption.
Vulnerability Detail
In the Linux kernel, a vulnerability has been identified in the nvme_tcp_recv_pdu() function. This function fails to validate the header length of incoming packets. When header digests are enabled, a malicious target can send a packet with an invalid header length (e.g., 255), which may lead to nvme_tcp_verify_hdgst() accessing memory outside the allocated area. This can result in memory corruption by overwriting critical data with the calculated digest, potentially leading to system instability or exploitation.
How To Fix
Minimum fixed version
6.12.19-1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade linuxTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary measure, you can disable header digests in the nvme-tcp configuration to mitigate the risk of exploitation until the package is updated. This can be done by modifying the configuration file or using appropriate command-line options, depending on your system setup.
Conclusion
The nvme-tcp vulnerability in the Linux kernel poses significant risks due to potential memory corruption. It is crucial to update to the patched version 6.12.19-1 to safeguard your system. Utilizing tools like Vulert can help monitor and alert for such vulnerabilities in real-time.
See every vulnerability recorded for linux →
FAQ
The nvme-tcp vulnerability allows for potential memory corruption due to improper validation of header lengths in incoming packets.
You can check if your application is affected by using Vulert, which monitors open-source vulnerabilities in real-time. Visit Vulert Scanner to analyze your manifest file.
Exploitation of this vulnerability could lead to memory corruption, system instability, or unauthorized access to sensitive data.
Yes, the vulnerability has been patched in version 6.12.19-1 of the Linux package. It is recommended to update to this version.
If immediate updates are not possible, consider disabling header digests in the nvme-tcp configuration as a temporary workaround.
References
Related vulnerabilities
Recent vulnerabilities recorded for linux.
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
