Wind River Support Network

HomeDefectsLIN1021-7296
Not to be fixed

LIN1021-7296 : Security Advisory - linux - CVE-2024-26585

Created: Feb 21, 2024    Updated: Mar 7, 2024
Resolved Date: Mar 7, 2024
Found In Version: 10.21.20.1
Severity: Standard
Applicable for: Wind River Linux LTS 21
Component/s: Kernel

Description

In the Linux kernel, the following vulnerability has been resolved:

tls: fix race between tx work scheduling and socket close

Similarly to previous commit, the submitting thread (recvmsg/sendmsg)
may exit as soon as the async crypto handler calls complete().
Reorder scheduling the work before calling complete().
This seems more logical in the first place, as it's
the inverse order of what the submitting thread will do.

CREATE(Triage):(User=admin) CVE-2024-26585 (https://nvd.nist.gov/vuln/detail/CVE-2024-26585)
Live chat
Online