Wind River Support Network

HomeDefectsLIN1023-3736
Fixed

LIN1023-3736 : Security Advisory - linux - CVE-2024-26585

Created: Feb 21, 2024    Updated: Apr 27, 2024
Resolved Date: Apr 19, 2024
Found In Version: 10.23.30.1
Fix Version: 10.23.30.9
Severity: Standard
Applicable for: Wind River Linux LTS 23
Component/s: Kernel

Description

In the Linux kernel, the following vulnerability has been resolved:

tls: fix race between tx work scheduling and socket close

Similarly to previous commit, the submitting thread (recvmsg/sendmsg)
may exit as soon as the async crypto handler calls complete().
Reorder scheduling the work before calling complete().
This seems more logical in the first place, as it's
the inverse order of what the submitting thread will do.

CREATE(Triage):(User=admin) CVE-2024-26585 (https://nvd.nist.gov/vuln/detail/CVE-2024-26585)

CVEs


Live chat
Online