Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2024-35908

tls: get psock ref after taking rxlock to avoid leak

Description

In the Linux kernel, the following vulnerability has been resolved: tls: get psock ref after taking rxlock to avoid leak At the start of tls_sw_recvmsg, we take a reference on the psock, and then call tls_rx_reader_lock. If that fails, we return directly without releasing the reference. Instead of adding a new label, just take the reference after locking has succeeded, since we don't need it before.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 4cbc325ed6b4dce4910be06d9d6940a8b919c59b to < 30fabe50a7ace3e9d57cf7f9288f33ea408491c8affected
  • 4cbc325ed6b4dce4910be06d9d6940a8b919c59b to < f1b7f14130d782433bc98c1e1e41ce6b4d4c3096affected
  • 4cbc325ed6b4dce4910be06d9d6940a8b919c59b to < b565d294e3d5aa809566a4d819835da11997d8b3affected
  • 4cbc325ed6b4dce4910be06d9d6940a8b919c59b to < 417e91e856099e9b8a42a2520e2255e6afe024beaffected

Linux Linux

Default version status: affected

  • 6.0affected
  • 0 to < 6.0unaffected
  • 6.1.85 to ≤ 6.1.*unaffected
  • 6.6.26 to ≤ 6.6.*unaffected
  • 6.8.5 to ≤ 6.8.*unaffected
  • 6.9 to ≤ *unaffected

References