CVE-2024-26800 tls: fix use-after-free on failed backlog decryption

In the Linux kernel, the following vulnerability has been resolved: tls: fix use-after-free on failed backlog decryption When the decrypt request goes to the backlog and cryptoaeaddecrypt returns -EBUSY, tlsdodecryption will wait until all async decryptions have completed. If one of them fails,...

The vulnerability of the crypto_aead_encrypt and crypto_aead_decrypt functions in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the cryptoaeadencrypt and cryptoaeaddecrypt functions in the Linux operating system is related to the return of incorrect code states. Exploiting this vulnerability can allow an attacker to cause a service failure...