Lucene search
+L

2 matches found

RedHat Linux
RedHat Linux
added 2026/01/12 9:30 a.m.5 views

kernel: tls: wait for pending async decryptions if tls_strp_msg_hold fails

A vulnerability was found in tlsdecryptsg in net/tls/tlssw.c in networking subsystem in the Linux Kernel.In this flaw, If it fails to clone of the input skb to hold the reference to the memory it uses may lead a use-after-free...

5.8AI score0.00183EPSS
SaveExploits0References5
SUSE CVE
SUSE CVE
added 2024/02/23 3:20 a.m.6 views

SUSE CVE-2024-26582

In the Linux kernel, the following vulnerability has been resolved: net: tls: fix use-after-free with partial reads and async decrypt tlsdecryptsg doesn't take a reference on the pages from clearskb, so the putpage in tlsdecryptdone releases them, and we trigger a use-after-free in processrxlist...

7.8CVSS6.2AI score0.00259EPSS
SaveExploits0References6
Rows per page
Query Builder