CVE-2024-26585
CriticalCVSS 9.8Exploitation Probability (EPSS)
Low risk9th percentile - higher than 9% of all known CVEs
Summary
In the Linux kernel, in the tls module, there is a vulnerability due to a race between tx work scheduling and socket close. The submitting thread (recvmsg/sendmsg) may exit as soon as the async crypto handler calls complete(). The fix reorders scheduling the work before calling complete().
Risk Assessment
The risk is a potential use-after-free of the socket, which could lead to system crash or potential remote code execution in the TLS context.
Recommendation
It is recommended to apply the kernel patch that reorders the operations and update systems to a kernel version containing this fix.
Original NVD description (English source)
In the Linux kernel, the following vulnerability has been resolved: tls: fix race between tx work scheduling and socket close Similarly to previous commit, the submitting thread (recvmsg/sendmsg) may exit as soon as the async crypto handler calls complete(). Reorder scheduling the work before calling complete(). This seems more logical in the first place, as it's the inverse order of what the submitting thread will do.