In the Linux kernel, the following vulnerability has been resolved:
net: tls: fix use-after-free with partial reads and async decrypt
tls_decrypt_sg doesn't take a reference on the pages from clear_skb, so the put_page() in tls_decrypt_done releases them, and we trigger a use-after-free in process_rx_list when we try to read from the partially-read skb.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-debug-modulesUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-64k-debug-modules-extraUpgrade kernel-tools-libsUpgrade kernel-64k-debugUpgrade kernel-tools-libs-develUpgrade kernel-rt-modulesUpgrade kernel-headersUpgrade kernel-64k-coreUpgrade kernel-debug-modules-coreUpgrade kernel-abi-stablelistsUpgrade kernel-zfcpdumpUpgrade kernel-devel-matchedUpgrade kernel-64k-devel-matchedUpgrade rvUpgrade kernel-toolsUpgrade kernel-zfcpdump-modulesUpgrade kernel-rt-debug-coreUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-rt-debug-modules-coreUpgrade kernel-debug-devel-matchedUpgrade kernel-zfcpdump-coreUpgrade kernel-rtUpgrade kernel-64k-modulesUpgrade kernel-rt-modules-coreUpgrade libperfUpgrade kernel-64kUpgrade kernel-uki-virtUpgrade kernel-modules-coreUpgrade kernel-debug-modules-extraUpgrade perfUpgrade kernel-rt-modules-extraUpgrade kernel-zfcpdump-develUpgrade kernel-debug-coreUpgrade kernel-coreUpgrade kernel-debug-uki-virtUpgrade kernelUpgrade kernel-64k-debug-develUpgrade kernel-zfcpdump-devel-matchedUpgrade bpftoolUpgrade kernel-64k-debug-coreUpgrade kernel-64k-develUpgrade kernel-rt-coreUpgrade kernel-rt-debug-modules-extraUpgrade kernel-64k-debug-modulesUpgrade kernel-rt-develUpgrade kernel-rt-debug-modulesUpgrade kernel-modulesUpgrade kernel-64k-modules-coreUpgrade kernel-develUpgrade kernel-64k-debug-modules-coreUpgrade kernel-docUpgrade kernel-cross-headersUpgrade kernel-rt-debug-develUpgrade kernel-rt-debugUpgrade kernel-modules-extraUpgrade kernel-debugUpgrade rtlaUpgrade kernel-64k-modules-extraUpgrade python3-perfUpgrade kernel-debug-develUpgrade kernel-zfcpdump-modules-extra | Nov 4, 2024 | Feb 21, 2024 |
| Amazon_linux_2023 | — | Upgrade kernel-libbpf-develUpgrade kernel-libbpf-staticUpgrade bpftoolUpgrade python3-perf-debuginfoUpgrade kernel-modules-extra-commonUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade python3-perfUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-headersUpgrade kernel-livepatch-6.1.79-99.164Upgrade kernel-modules-extraUpgrade perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-toolsUpgrade kernel-develUpgrade kernel-libbpfUpgrade kernel-debuginfoUpgrade kernel-tools-develUpgrade perfUpgrade bpftool-debuginfo | Feb 17, 2025 | Feb 21, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Feb 21, 2024 |
| Oracle_linux | — | Upgrade kernel | May 14, 2024 | Feb 21, 2024 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernelNo solution exists | Apr 19, 2024 | Feb 21, 2024 |
| Suse | — | Upgrade kernel-sourceUpgrade kernel-kvmsmall-develUpgrade kernel-syms-azureUpgrade kernel-default-vdsoUpgrade kernel-kvmsmallUpgrade kernel-source-azureUpgrade kernel-64kb-develUpgrade kernel-zfcpdumpUpgrade kernel-default-extraUpgrade kernel-azureUpgrade kernel-macrosUpgrade kernel-develUpgrade kernel-devel-azureUpgrade kernel-obs-qaUpgrade kernel-source-vanillaUpgrade kernel-symsUpgrade kernel-64kbUpgrade kernel-azure-develUpgrade kernel-default-develUpgrade kernel-default-livepatchUpgrade kernel-azure-vdsoUpgrade kernel-kvmsmall-vdsoUpgrade kernel-docsUpgrade kernel-64kb-extraUpgrade kernel-docs-htmlUpgrade kernel-azure-extraUpgrade kernel-defaultUpgrade reiserfs-kmp-defaultUpgrade kernel-obs-build | Dec 5, 2025 | Feb 3, 2025 |
| Ubuntu | — | Upgrade linux-image-6.5.0-1024-oemUpgrade linux-image-starfiveUpgrade linux-image-kvmUpgrade linux-image-6.5.0-41-genericUpgrade linux-image-oem-22.04dUpgrade linux-image-6.5.0-1022-azureUpgrade linux-image-nvidia-64k-6.5Upgrade linux-image-6.5.0-41-generic-64kUpgrade linux-image-oracleUpgrade linux-image-6.5.0-1021-nvidiaUpgrade linux-image-oracle-64kUpgrade linux-image-awsUpgrade linux-image-6.5.0-1018-raspiUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-6.5.0-1022-gcpUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-laptop-23.10Upgrade linux-image-nvidia-6.5Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-raspiUpgrade linux-image-azureUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-6.5.0-1024-oracleUpgrade linux-image-6.5.0-1015-starfiveUpgrade linux-image-6.5.0-1024-oracle-64kUpgrade linux-image-6.5.0-1017-laptopUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-lowlatencyUpgrade linux-image-oem-22.04bUpgrade linux-image-generic-64kUpgrade linux-image-6.5.0-41-lowlatency-64kUpgrade linux-image-oem-22.04Upgrade linux-image-virtualUpgrade linux-image-6.5.0-41-lowlatencyUpgrade linux-image-6.5.0-1021-awsUpgrade linux-image-gcpUpgrade linux-image-oem-22.04aUpgrade linux-image-oem-22.04cUpgrade linux-image-6.5.0-1021-nvidia-64kUpgrade linux-image-6.5.0-1022-azure-fdeUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-genericUpgrade linux-image-azure-fdeUpgrade linux-image-generic-lpae | May 17, 2024 | Feb 21, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Feb 21, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub