In the Linux kernel, the following vulnerability has been resolved:
tls: get psock ref after taking rxlock to avoid leak
At the start of tls_sw_recvmsg, we take a reference on the psock, and then call tls_rx_reader_lock. If that fails, we return directly without releasing the reference.
Instead of adding a new label, just take the reference after locking has succeeded, since we don't need it before.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade kernel-livepatch-6.1.87-99.174Upgrade bpftool-debuginfoUpgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64Upgrade python3-perf-debuginfoUpgrade kernel-modules-extra-commonUpgrade kernel-libbpf-staticUpgrade kernelUpgrade kernel-debuginfo-common-aarch64Upgrade python3-perfUpgrade kernel-develUpgrade kernel-tools-debuginfoUpgrade kernel-tools-develUpgrade kernel-modules-extraUpgrade kernel-libbpfUpgrade kernel-debuginfoUpgrade perf-debuginfoUpgrade kernel-headersUpgrade bpftoolUpgrade kernel-libbpf-develUpgrade perf | Feb 17, 2025 | May 19, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | May 19, 2024 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rtNo solution exists | Dec 5, 2024 | May 19, 2024 |
| Suse | — | Upgrade dtb-apmUpgrade kernel-default-base-rebuildUpgrade kernel-sourceUpgrade kernel-docsUpgrade dtb-rockchipUpgrade dtb-qcomUpgrade kernel-debug-vdsoUpgrade cluster-md-kmp-rtUpgrade cluster-md-kmp-defaultUpgrade dtb-sprdUpgrade cluster-md-kmp-64kbUpgrade kernel-azure-develUpgrade dtb-exynosUpgrade kernel-rtUpgrade kernel-azure-livepatch-develUpgrade dlm-kmp-rtUpgrade dtb-mediatekUpgrade dlm-kmp-azureUpgrade kernel-devel-rtUpgrade gfs2-kmp-defaultUpgrade kernel-develUpgrade kernel-default-vdsoUpgrade kernel-rt-extraUpgrade dtb-nvidiaUpgrade kernel-64kb-extraUpgrade dtb-allwinnerUpgrade ocfs2-kmp-defaultUpgrade kselftests-kmp-defaultUpgrade kernel-devel-azureUpgrade dtb-armUpgrade kernel-default-optionalUpgrade kernel-rt-develUpgrade kernel-64kb-develUpgrade dtb-xilinxUpgrade reiserfs-kmp-azureUpgrade kselftests-kmp-rtUpgrade kernel-syms-azureUpgrade kernel-defaultUpgrade kernel-obs-buildUpgrade kernel-source-rtUpgrade kernel-rt_debugUpgrade dtb-amazonUpgrade kernel-rt-optionalUpgrade kernel-default-baseUpgrade kernel-azure-optionalUpgrade kernel-64kbUpgrade kselftests-kmp-azureUpgrade gfs2-kmp-azureUpgrade kernel-debug-livepatch-develUpgrade dtb-amdUpgrade kernel-azure-extraUpgrade kernel-64kb-optionalUpgrade kernel-zfcpdumpUpgrade kernel-source-azureUpgrade kernel-rt_debug-vdsoUpgrade kernel-rt-vdsoUpgrade kernel-obs-qaUpgrade reiserfs-kmp-defaultUpgrade dtb-amlogicUpgrade gfs2-kmp-rtUpgrade gfs2-kmp-64kbUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-rt-livepatch-develUpgrade kernel-macrosUpgrade kernel-kvmsmall-develUpgrade kernel-docs-htmlUpgrade kernel-default-extraUpgrade dtb-socionextUpgrade dtb-renesasUpgrade dtb-hisiliconUpgrade ocfs2-kmp-azureUpgrade dlm-kmp-64kbUpgrade reiserfs-kmp-rtUpgrade kernel-azureUpgrade kernel-64kb-livepatch-develUpgrade kernel-syms-rtUpgrade kernel-symsUpgrade kernel-default-livepatchUpgrade kernel-azure-vdsoUpgrade dtb-alteraUpgrade kernel-debugUpgrade ocfs2-kmp-rtUpgrade kernel-source-vanillaUpgrade kernel-kvmsmall-vdsoUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-debug-develUpgrade dtb-broadcomUpgrade dtb-appleUpgrade kernel-rt_debug-develUpgrade kselftests-kmp-64kbUpgrade kernel-kvmsmallUpgrade kernel-default-livepatch-develUpgrade dlm-kmp-defaultUpgrade dtb-freescaleUpgrade ocfs2-kmp-64kbUpgrade reiserfs-kmp-64kbUpgrade kernel-default-develUpgrade dtb-marvellUpgrade dtb-lgUpgrade dtb-caviumUpgrade cluster-md-kmp-azure | Aug 8, 2024 | May 19, 2024 |
| Ubuntu | — | Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-nvidiaUpgrade linux-image-6.8.0-1009-nvidia-64kUpgrade linux-image-6.8.0-1009-nvidiaUpgrade linux-image-genericUpgrade linux-image-generic-64kUpgrade linux-image-intelUpgrade linux-image-6.8.0-1008-oemUpgrade linux-image-6.8.0-38-lowlatency-64kUpgrade linux-image-nvidia-64kUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-raspiUpgrade linux-image-oem-24.04aUpgrade linux-image-azure-fdeUpgrade linux-image-azureUpgrade linux-image-kvmUpgrade linux-image-oracle-64kUpgrade linux-image-6.8.0-1010-azureUpgrade linux-image-virtualUpgrade linux-image-6.8.0-38-generic-64kUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.8.0-1008-ibmUpgrade linux-image-6.8.0-1007-intelUpgrade linux-image-6.8.0-38-genericUpgrade linux-image-gkeUpgrade linux-image-6.8.0-38-lowlatencyUpgrade linux-image-6.8.0-1006-gkeUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-ibm-classicUpgrade linux-image-lowlatency-64kUpgrade linux-image-6.8.0-1010-azure-fdeUpgrade linux-image-oem-24.04Upgrade linux-image-ibmUpgrade linux-image-generic-lpaeUpgrade linux-image-awsUpgrade linux-image-gcpUpgrade linux-image-6.8.0-1011-awsUpgrade linux-image-lowlatencyUpgrade linux-image-6.8.0-1010-gcpUpgrade linux-image-6.8.0-1008-oracle-64kUpgrade linux-image-6.8.0-1008-oracleUpgrade linux-image-oracleUpgrade linux-image-6.8.0-1007-raspi | Jul 12, 2024 | May 19, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 14, 2025 | May 19, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub