Wind River Support Network

HomeDefectsLIN1019-10997
Not to be fixed

LIN1019-10997 : Security Advisory - linux - CVE-2024-26585

Created: Feb 21, 2024    Updated: Mar 7, 2024
Resolved Date: Mar 7, 2024
Found In Version: 10.19.45.1
Severity: Standard
Applicable for: Wind River Linux LTS 19
Component/s: Kernel

Description

In the Linux kernel, the following vulnerability has been resolved:

tls: fix race between tx work scheduling and socket close

Similarly to previous commit, the submitting thread (recvmsg/sendmsg)
may exit as soon as the async crypto handler calls complete().
Reorder scheduling the work before calling complete().
This seems more logical in the first place, as it's
the inverse order of what the submitting thread will do.

CREATE(Triage):(User=admin) CVE-2024-26585 (https://nvd.nist.gov/vuln/detail/CVE-2024-26585)
Live chat
Online