In the Linux kernel, the following vulnerability has been resolved:
net: tls: fix use-after-free with partial reads and async decrypt
tls_decrypt_sg doesn't take a reference on the pages from clear_skb, so the put_page() in tls_decrypt_done releases them, and we trigger a use-after-free in process_rx_list when we try to read from the partially-read skb.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade rvUpgrade kernel-64k-debug-modules-extraUpgrade kernel-tools-libsUpgrade kernel-debug-devel-matchedUpgrade kernel-zfcpdumpUpgrade kernel-64k-debugUpgrade kernel-debug-modulesUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-zfcpdump-modulesUpgrade kernel-modules-coreUpgrade kernel-64k-modulesUpgrade kernel-64k-coreUpgrade kernel-rt-modules-coreUpgrade kernel-abi-stablelistsUpgrade libperfUpgrade kernel-debug-modules-coreUpgrade kernel-uki-virtUpgrade kernel-zfcpdump-coreUpgrade kernel-rtUpgrade kernel-tools-libs-develUpgrade kernel-rt-debug-modules-coreUpgrade kernel-headersUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-64kUpgrade kernel-toolsUpgrade kernel-debug-modules-extraUpgrade kernel-rt-debug-coreUpgrade kernel-64k-devel-matchedUpgrade kernel-rt-modulesUpgrade kernel-devel-matchedUpgrade kernel-cross-headersUpgrade kernel-64k-debug-develUpgrade kernel-debug-develUpgrade kernel-debug-uki-virtUpgrade kernel-64k-debug-coreUpgrade kernel-64k-modules-coreUpgrade python3-perfUpgrade kernel-coreUpgrade kernel-debugUpgrade kernel-rt-modules-extraUpgrade kernel-modulesUpgrade kernel-zfcpdump-develUpgrade kernel-develUpgrade bpftoolUpgrade kernel-rt-debug-modules-extraUpgrade rtlaUpgrade kernel-rt-coreUpgrade kernel-rt-debug-modulesUpgrade kernel-debug-coreUpgrade perfUpgrade kernelUpgrade kernel-64k-debug-modulesUpgrade kernel-rt-develUpgrade kernel-64k-develUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-64k-debug-modules-coreUpgrade kernel-64k-modules-extraUpgrade kernel-rt-debug-develUpgrade kernel-rt-debugUpgrade kernel-docUpgrade kernel-modules-extra | Nov 4, 2024 | Feb 21, 2024 |
| Amazon_linux_2023 | — | Upgrade kernel-modules-extra-commonUpgrade bpftoolUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-libbpf-develUpgrade python3-perfUpgrade kernelUpgrade kernel-libbpf-staticUpgrade python3-perf-debuginfoUpgrade kernel-tools-develUpgrade kernel-develUpgrade perf-debuginfoUpgrade perfUpgrade kernel-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-headersUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-libbpfUpgrade kernel-toolsUpgrade kernel-tools-debuginfoUpgrade kernel-modules-extraUpgrade kernel-livepatch-6.1.79-99.164 | Feb 17, 2025 | Feb 21, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Feb 21, 2024 |
| Oracle_linux | — | Upgrade kernel | May 14, 2024 | Feb 21, 2024 |
| Redhat_linux | — | Upgrade kernelNo solution existsUpgrade kernel-rt | Apr 19, 2024 | Feb 21, 2024 |
| Suse | — | Upgrade kernel-64kbUpgrade kernel-obs-qaUpgrade kernel-symsUpgrade kernel-sourceUpgrade kernel-syms-azureUpgrade kernel-64kb-develUpgrade kernel-azureUpgrade kernel-default-livepatchUpgrade kernel-default-develUpgrade kernel-default-vdsoUpgrade kernel-kvmsmallUpgrade kernel-zfcpdumpUpgrade kernel-source-azureUpgrade kernel-source-vanillaUpgrade kernel-azure-develUpgrade kernel-devel-azureUpgrade kernel-develUpgrade kernel-macrosUpgrade kernel-default-extraUpgrade kernel-kvmsmall-develUpgrade reiserfs-kmp-defaultUpgrade kernel-obs-buildUpgrade kernel-docsUpgrade kernel-64kb-extraUpgrade kernel-docs-htmlUpgrade kernel-azure-extraUpgrade kernel-kvmsmall-vdsoUpgrade kernel-azure-vdsoUpgrade kernel-default | Dec 5, 2025 | Feb 3, 2025 |
| Ubuntu | — | Upgrade linux-image-virtualUpgrade linux-image-6.5.0-1024-oracle-64kUpgrade linux-image-gcpUpgrade linux-image-lowlatencyUpgrade linux-image-6.5.0-1022-azure-fdeUpgrade linux-image-oem-22.04aUpgrade linux-image-6.5.0-1024-oracleUpgrade linux-image-6.5.0-1021-awsUpgrade linux-image-oem-22.04cUpgrade linux-image-oem-22.04bUpgrade linux-image-6.5.0-1021-nvidia-64kUpgrade linux-image-raspi-nolpaeUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-generic-64kUpgrade linux-image-azure-fdeUpgrade linux-image-genericUpgrade linux-image-generic-lpaeUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-6.5.0-41-lowlatency-64kUpgrade linux-image-6.5.0-1015-starfiveUpgrade linux-image-lowlatency-64kUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-oem-22.04Upgrade linux-image-6.5.0-41-lowlatencyUpgrade linux-image-6.5.0-1017-laptopUpgrade linux-image-starfiveUpgrade linux-image-6.5.0-41-genericUpgrade linux-image-awsUpgrade linux-image-oem-22.04dUpgrade linux-image-oracle-64kUpgrade linux-image-oracleUpgrade linux-image-nvidia-6.5Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-6.5.0-1022-azureUpgrade linux-image-6.5.0-1024-oemUpgrade linux-image-nvidia-64k-6.5Upgrade linux-image-raspiUpgrade linux-image-azureUpgrade linux-image-6.5.0-41-generic-64kUpgrade linux-image-laptop-23.10Upgrade linux-image-6.5.0-1022-gcpUpgrade linux-image-6.5.0-1018-raspiUpgrade linux-image-6.5.0-1021-nvidiaUpgrade linux-image-kvmUpgrade linux-image-nvidia-hwe-22.04 | May 17, 2024 | Feb 21, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Feb 21, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub