CVE-2024-26582: net: tls: fix use-after-free with partial reads and async decrypt

Published Feb 21, 2024
·
Updated

In the Linux kernel, the following vulnerability has been resolved:

net: tls: fix use-after-free with partial reads and async decrypt

tlsdecryptsg doesn't take a reference on the pages from clearskb, so the putpage() in tlsdecryptdone releases them, and we trigger a use-after-free in processrxlist when we try to read from the partially-read skb.

Affected Software

5 affected componentsFixes available
redhat/kernel<6.8
6.8
Linux Linux kernel>=6.0<6.1.79
Linux Linux kernel>=6.2.0<6.6.18
Linux Linux kernel>=6.7.0<6.7.6
debian/linux
5.10.223-15.10.234-16.1.129-16.1.135-16.12.25-16.12.27-1

Remediation

Recommended actions to resolve this vulnerability, in priority order.

  1. Upgrade

    Upgrade debian/linux to a version that resolves this vulnerability.

    Fixed in 5.10.223-1Fixed in 5.10.234-1Fixed in 6.1.129-1Fixed in 6.1.135-1Fixed in 6.12.25-1Fixed in 6.12.27-1
  2. Upgrade

    Upgrade redhat/kernel to a version that resolves this vulnerability.

    Fixed in 6.8

Event History

Feb 21, 2024
CVE Published
via MITRE·02:59 PM
Data Sourced
via MITRE·02:59 PM
DescriptionSeverity
Data Sourced
via NVD·03:15 PM
RemedyDescriptionSeverityWeaknessAffected Software
Feb 22, 2024
Data Sourced
via Red Hat·02:28 PM
DescriptionSeverityAffected Software
May 11, 2024
Data Sourced
via Launchpad·04:29 PM
Description
Dec 1, 2024
Data Sourced
via Ubuntu·04:33 AM
RemedyDescriptionSeverityAffected Software

Frequently Asked Questions

1

What is the severity of CVE-2024-26582?

CVE-2024-26582 has a high severity rating due to the potential for a use-after-free vulnerability in the Linux kernel.

2

How do I fix CVE-2024-26582?

To fix CVE-2024-26582, update the kernel to version 6.8 or a later version for Red Hat, or apply the recommended patches for Debian versions listed.

3

Which systems are affected by CVE-2024-26582?

CVE-2024-26582 affects certain versions of the Linux kernel, specifically between 6.0 and 6.1.79, as well as specific versions within 6.2.0 to 6.7.6.

4

What does the CVE-2024-26582 vulnerability impact?

The CVE-2024-26582 vulnerability impacts the network transport layer due to improper handling of TLS decryption resulting in potential memory safety issues.

5

Is CVE-2024-26582 actively being exploited?

There is currently no public information indicating that CVE-2024-26582 is being actively exploited in the wild, but it should be patched promptly.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203