THREATOPS

THREAT OPS › Threat News › [NVD] CVE-2024-26583 (CRITICAL 9.8) — In the Linux kernel, the following vulnerability has been resolved: tls: fix race between async notify and socket close The submitting thread (one which called recvmsg/sendmsg) may exit as soon as the async crypto handler calls complete() so any code past that point risks touch

[NVD] CVE-2024-26583 (CRITICAL 9.8) — In the Linux kernel, the following vulnerability has been resolved: tls: fix race between async notify and socket close The submitting thread (one which called recvmsg/sendmsg) may exit as soon as the async crypto handler calls complete() so any code past that point risks touch

lownvdPublished 2024-02-21

CVE-2024-26583 CVSS: 9.8 CRITICAL Published: 2024-02-21T15:15:09.373

In the Linux kernel, the following vulnerability has been resolved:

tls: fix race between async notify and socket close

The submitting thread (one which called recvmsg/sendmsg) may exit as soon as the async crypto handler calls complete() so any code past that point risks touching already freed data.

Try to avoid the locking

Indicators of compromise

CVE-2024-26583cve

Original source: https://nvd.nist.gov/vuln/detail/CVE-2024-26583