In the Linux kernel, the following vulnerability has been resolved:
tcp: Fix Use-After-Free in tcp_ao_connect_init
Since call_rcu, which is called in the hlist_for_each_entry_rcu traversal of tcp_ao_connect_init, is not part of the RCU read critical section, it is possible that the RCU grace period will pass during the traversal and the key will be free.
To prevent this, it should be changed to hlist_for_each_entry_safe.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 27, 2026 | Jul 27, 2026 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 14, 2024 |
| Ubuntu | — | Upgrade linux-image-6.8.0-40-lowlatency-64kUpgrade linux-image-nvidiaUpgrade linux-image-6.8.0-40-lowlatencyUpgrade linux-image-6.8.0-1010-ibmUpgrade linux-image-genericUpgrade linux-image-6.8.0-1013-awsUpgrade linux-image-lowlatency-64kUpgrade linux-image-6.8.0-40-generic-64kUpgrade linux-image-ibmUpgrade linux-image-generic-64kUpgrade linux-image-ibm-classicUpgrade linux-image-generic-lpaeUpgrade linux-image-raspiUpgrade linux-image-6.8.0-1012-gcpUpgrade linux-image-azureUpgrade linux-image-lowlatencyUpgrade linux-image-azure-fdeUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.8.0-1012-azure-fdeUpgrade linux-image-6.8.0-1011-nvidiaUpgrade linux-image-6.8.0-1010-oracleUpgrade linux-image-6.8.0-1012-azureUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.8.0-1011-nvidia-64kUpgrade linux-image-kvmUpgrade linux-image-6.8.0-40-genericUpgrade linux-image-gcpUpgrade linux-image-oracleUpgrade linux-image-nvidia-64kUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.8.0-1010-oemUpgrade linux-image-6.8.0-1008-gkeUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-awsUpgrade linux-image-oem-24.04aUpgrade linux-image-virtualUpgrade linux-image-6.8.0-1010-oracle-64kUpgrade linux-image-nvidia-6.8Upgrade linux-image-oracle-64kUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.8.0-1009-raspiUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1011-nvidia-lowlatencyUpgrade linux-image-6.8.0-1011-nvidia-lowlatency-64kUpgrade linux-image-gkeUpgrade linux-image-oem-24.04 | Aug 9, 2024 | May 14, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub