Vulnerability Details : CVE-2024-26585
In the Linux kernel, the following vulnerability has been resolved:
tls: fix race between tx work scheduling and socket close
Similarly to previous commit, the submitting thread (recvmsg/sendmsg)
may exit as soon as the async crypto handler calls complete().
Reorder scheduling the work before calling complete().
This seems more logical in the first place, as it's
the inverse order of what the submitting thread will do.
Products affected by CVE-2024-26585
- cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
- cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2024-26585
0.03%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 7 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2024-26585
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
|---|---|---|---|---|---|---|
|
4.7
|
MEDIUM | CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H |
1.0
|
3.6
|
NIST | 2024-03-14 |
CWE ids for CVE-2024-26585
-
The product contains a concurrent code sequence that requires temporary, exclusive access to a shared resource, but a timing window exists in which the shared resource can be modified by another code sequence operating concurrently.Assigned by: nvd@nist.gov (Primary)
References for CVE-2024-26585
-
https://git.kernel.org/stable/c/196f198ca6fce04ba6ce262f5a0e4d567d7d219d
tls: fix race between tx work scheduling and socket close - kernel/git/stable/linux.git - Linux kernel stable tree
-
https://git.kernel.org/stable/c/e327ed60bff4a991cd7a709c47c4f0c5b4a4fd57
tls: fix race between tx work scheduling and socket close - kernel/git/stable/linux.git - Linux kernel stable treePatch
-
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/EZOU3745CWCDZ7EMKMXB2OEEIB5Q3IWM/
[SECURITY] Fedora 39 Update: kernel-6.7.6-200.fc39 - package-announce - Fedora Mailing-Lists
-
https://git.kernel.org/stable/c/e01e3934a1b2d122919f73bc6ddbe1cdafc4bbdb
tls: fix race between tx work scheduling and socket close - kernel/git/stable/linux.git - Linux kernel stable treePatch
-
https://git.kernel.org/stable/c/dd32621f19243f89ce830919496a5dcc2158aa33
tls: fix race between tx work scheduling and socket close - kernel/git/stable/linux.git - Linux kernel stable tree
-
https://git.kernel.org/stable/c/6db22d6c7a6dc914b12c0469b94eb639b6a8a146
tls: fix race between tx work scheduling and socket close - kernel/git/stable/linux.git - Linux kernel stable treePatch
-
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OX4EWCYDZRTOEMC2C6OF7ZACAP23SUB5/
[SECURITY] Fedora 38 Update: kernel-6.7.6-100.fc38 - package-announce - Fedora Mailing-Lists
Jump to