kernel: tls: wait for pending async decryptions if tls_strp_msg_hold fails

A vulnerability was found in tlsdecryptsg in net/tls/tlssw.c in networking subsystem in the Linux Kernel.In this flaw, If it fails to clone of the input skb to hold the reference to the memory it uses may lead a use-after-free...

tls: wait for pending async decryptions if tls_strp_msg_hold fails

...

CVE-2025-40176

CVE-2025-40176 affects the Linux kernel. The issue occurs in the TLS async decrypt path: when tls_strp_msg_hold fails to clone input skb, processing can lead to use-after-free and memory writes after recv() returns. The mitigation described in the sources is to wait for all pending decryption req...