CVE-2024-35908: Missing Release of Memory after Effective Lifetime

In the Linux kernel, the following vulnerability has been resolved: tls: get psock ref after taking rxlock to avoid leak At the start of tlsswrecvmsg, we take a reference on the psock, and then call tlsrxreaderlock. If that fails, we return directly without releasing the reference. Instead of...

The vulnerability of the function sk_psock_verdict_data_ready() in the net/core/skmsg.c module of the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the skpsockverdictdataready function in the net/core/skmsg.c module of the Linux kernel is related to the assignment of a null pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...

SUSE CVE-2024-26731

In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: Fix NULL pointer dereference in skpsockverdictdataready syzbot reported the following NULL pointer dereference issue 1: BUG: kernel NULL pointer dereference, address: 0000000000000000 ... RIP: 0010:0x0 ... Call Trac...

PT-2024-8404

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to a component of the Linux kernel's tls, specifically a problem with resource locking in the tls sw recvmsg function. This can lead to a denial of service. The...

kernel: sock: redo the psock vs ULP protection check

In the Linux kernel, the following vulnerability has been resolved: sock: redo the psock vs ULP protection check Commit 8a59f9d1e3d4 "sock: Introduce sk-skprot-psockupdateskprot" has moved the inetcskhasulpsk check from skpsockinit to the new tcpbpfupdateproto function. I'm guessing that this was...

kernel: bpf, sockmap: Fix memleak in sk_psock_queue_msg

In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: Fix memleak in skpsockqueuemsg If tcpbpfsendmsg is running during a tear down operation we may enqueue data on the ingress msg queue while tear down is trying to free it. sk1 redirect sk2 sk2 -------------------...

kernel: sock: redo the psock vs ULP protection check

In the Linux kernel, the following vulnerability has been resolved: sock: redo the psock vs ULP protection check Commit 8a59f9d1e3d4 "sock: Introduce sk-skprot-psockupdateskprot" has moved the inetcskhasulpsk check from skpsockinit to the new tcpbpfupdateproto function. I'm guessing that this was...

PT-2022-35202 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.77 Description: The issue is related to data-races around kcm-rx psock. It was introduced in version v4.6 and fixed in Linux Kernel version v5.15.77. The actual impact and attack plausibility have not yet...

PT-2022-35716 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.19.264 Description: The issue is related to data-races around kcm-rx psock. This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibilit...

PT-2022-35875 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.9.332 Description: The issue is related to data-races around kcm-rx psock. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior to v4.9.332,...

PT-2022-35600

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.223 Description The issue is related to data-races around kcm-rx psock. It was introduced in version v4.6 and fixed in Linux Kernel version v5.4.223. The actual impact and attack plausibility have not yet be...

PT-2022-34885

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v6.0.7 Description The issue is related to data-races around kcm-rx psock. It was introduced in version v4.6 and fixed in Linux Kernel version v6.0.7. The actual impact and attack plausibility have not yet been...

PT-2022-35802

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.14.298 Description The issue is related to data-races around kcm-rx psock. It was introduced in version v4.6 and is fixed in Linux Kernel version v4.14.298. The actual impact and attack plausibility have not y...