Linux Distros Unpatched Vulnerability : CVE-2024-26582

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: net: tls: fix use-after-free with partial reads and async decrypt tlsdecryptsg doesn't take ...

Security Bulletin: Multiple Linux Kernel vulnerabilities affect IBM Storage Scale System.

Summary There are multiple vulnerabilities in the Linux Kernel, used by IBM Storage Scale System, which could allow a local authenticated attacker to gain elevated privileges on the system. Fixes for these vulnerabilities are available. CVE-2023-51043, CVE-2024-1086, CVE-2024-0646, CVE-2023-6932,...

Important: Red Hat Security Advisory: kernel-rt security and bug fix update

An update for kernel-rt is now available for Red Hat Enterprise Linux 9.2 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available f...

CVE-2024-26582 affecting package kernel for versions less than 6.6.22.1-2

CVE-2024-26582 affecting package kernel for versions less than 6.6.22.1-2. An upgraded version of the package is available that resolves this issue...

CVE-2024-26582

creationtimestamp| type| source ---|---|--- 2024-02-21 16:31:22+00:00| seen| https://t.me/ctinow/189734 2024-02-21 16:31:29+00:00| seen| https://t.me/ctinow/189741 2024-02-22 16:11:25+00:00| seen| https://t.me/ctinow/190857 2024-02-22 21:29:31+00:00| seen| https://t.me/arpsyndicate/4058 2024-02-2...

AZL-35798 CVE-2024-26582 affecting package kernel for versions less than 6.6.22.1-2

In the Linux kernel, the following vulnerability has been resolved: net: tls: fix use-after-free with partial reads and async decrypt tlsdecryptsg doesn't take a reference on the pages from clearskb, so the putpage in tlsdecryptdone releases them, and we trigger a use-after-free in processrxlist...

CVE-2024-26582

In the Linux kernel, the following vulnerability has been resolved: net: tls: fix use-after-free with partial reads and async decrypt tlsdecryptsg doesn't take a reference on the pages from clearskb, so the putpage in tlsdecryptdone releases them, and we trigger a use-after-free in processrxlist...

CVE-2024-26582

In the Linux kernel, the following vulnerability has been resolved: net: tls: fix use-after-free with partial reads and async decrypt tlsdecryptsg doesn't take a reference on the pages from clearskb, so the putpage in tlsdecryptdone releases them, and we trigger a use-after-free in processrxlist...

CVE-2024-26582 net: tls: fix use-after-free with partial reads and async decrypt

In the Linux kernel, the following vulnerability has been resolved: net: tls: fix use-after-free with partial reads and async decrypt tlsdecryptsg doesn't take a reference on the pages from clearskb, so the putpage in tlsdecryptdone releases them, and we trigger a use-after-free in processrxlist...

CVE-2024-26582

CVE-2024-26582 is a Linux kernel vulnerability in the TLS subsystem. The issue stems from net/tls: tls_decrypt_sg not taking a reference on pages from clear_skb, which allows the put_page() in tls_decrypt_done to release those pages and trigger a use-after-free when reading a partially-read skb i...