Skip to content
CVE PROGRAM SOURCE RECORD9.8 Critical

CVE-2024-26585

tls: fix race between tx work scheduling and socket close

Description

In the Linux kernel, the following vulnerability has been resolved: tls: fix race between tx work scheduling and socket close Similarly to previous commit, the submitting thread (recvmsg/sendmsg) may exit as soon as the async crypto handler calls complete(). Reorder scheduling the work before calling complete(). This seems more logical in the first place, as it's the inverse order of what the submitting thread will do.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • a42055e8d2c30d4decfc13ce943d09c7b9dad221 to < dd32621f19243f89ce830919496a5dcc2158aa33affected
  • a42055e8d2c30d4decfc13ce943d09c7b9dad221 to < 196f198ca6fce04ba6ce262f5a0e4d567d7d219daffected
  • a42055e8d2c30d4decfc13ce943d09c7b9dad221 to < 6db22d6c7a6dc914b12c0469b94eb639b6a8a146affected
  • a42055e8d2c30d4decfc13ce943d09c7b9dad221 to < e327ed60bff4a991cd7a709c47c4f0c5b4a4fd57affected
  • a42055e8d2c30d4decfc13ce943d09c7b9dad221 to < e01e3934a1b2d122919f73bc6ddbe1cdafc4bbdbaffected

Linux Linux

Default version status: affected

  • 4.20affected
  • 0 to < 4.20unaffected
  • 5.15.165 to ≤ 5.15.*unaffected
  • 6.1.84 to ≤ 6.1.*unaffected
  • 6.6.18 to ≤ 6.6.*unaffected
  • 6.7.6 to ≤ 6.7.*unaffected
  • 6.8 to ≤ *unaffected

References