CVE-2024-26585

CVSS v3.1 4.7 (Medium)
47% Progress
EPSS 0.04 % (5th)
0.04% Progress
Affected Products 1
Advisories 88
NVD Status Modified

In the Linux kernel, the following vulnerability has been resolved:

tls: fix race between tx work scheduling and socket close

Similarly to previous commit, the submitting thread (recvmsg/sendmsg)
may exit as soon as the async crypto handler calls complete().
Reorder scheduling the work before calling complete().
This seems more logical in the first place, as it's
the inverse order of what the submitting thread will do.

Weaknesses
CWE-362
Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE Status
PUBLISHED
NVD Status
Modified
CNA
kernel.org
Published Date
2024-02-21 15:15:09
(6 months ago)
Updated Date
2024-08-19 05:15:06
(4 weeks ago)

Affected Products

Loading...
Loading...
Loading...

Configuration #1

    CPE23 From Up To
  Linux Kernel from 4.20.0 version and prior 6.6.18 version cpe:2.3:o:linux:linux_kernel >= 4.20.0 < 6.6.18
  Linux Kernel from 6.7.0 version and prior 6.7.6 version cpe:2.3:o:linux:linux_kernel >= 6.7.0 < 6.7.6
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...