CVE-2024-58239 tls: stop recv() if initial process_rx_list gave us non-DATA

In the Linux kernel, the following vulnerability has been resolved: tls: stop recv if initial processrxlist gave us non-DATA If we have a non-DATA record on the rxlist and another record of the same type still on the queue, we will end up merging them: - processrxlist copies the non-DATA record -...

CVE-2024-58239

In the Linux kernel, the following vulnerability has been resolved: tls: stop recv if initial processrxlist gave us non-DATA If we have a non-DATA record on the rxlist and another record of the same type still on the queue, we will end up merging them: - processrxlist copies the non-DATA record -...

CVE-2024-58239

The CVE-2024-58239 issue affects the Linux kernel TLS path: if a non-DATA record is present in the rx_list and another of the same type remains in the queue, records can be merged and processing may exit mid-loop. The fix, described in the advisory, is to check the record type and jump to the end...

PT-2024-1905

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the TLS Transport Layer Security implementation within the net/tls/tls sw.c module. The problem occurs because the tls decrypt sg function fails to take ...