Lucene search

K
redhatcveRedhat.comRH:CVE-2024-35908
HistoryMay 20, 2024 - 11:14 a.m.

CVE-2024-35908

2024-05-2011:14:30
redhat.com
access.redhat.com
6
linux kernel
tls vulnerability
rxlock

6.5 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

15.7%

In the Linux kernel, the following vulnerability has been resolved: tls: get psock ref after taking rxlock to avoid leak At the start of tls_sw_recvmsg, we take a reference on the psock, and then call tls_rx_reader_lock. If that fails, we return directly without releasing the reference. Instead of adding a new label, just take the reference after locking has succeeded, since we don’t need it before.

6.5 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

15.7%