CVE-2024-26582: net: tls: fix use-after-free with partial reads and async decrypt
In the Linux kernel, the following vulnerability has been resolved:
net: tls: fix use-after-free with partial reads and async decrypt
tlsdecryptsg doesn't take a reference on the pages from clearskb, so the putpage() in tlsdecryptdone releases them, and we trigger a use-after-free in processrxlist when we try to read from the partially-read skb.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 5.10.223-1Fixed in 5.10.234-1Fixed in 6.1.129-1Fixed in 6.1.135-1Fixed in 6.12.25-1Fixed in 6.12.27-1 - Upgrade
Upgrade
redhat/kernelto a version that resolves this vulnerability.Fixed in 6.8
Event History
Frequently Asked Questions
What is the severity of CVE-2024-26582?
CVE-2024-26582 has a high severity rating due to the potential for a use-after-free vulnerability in the Linux kernel.
How do I fix CVE-2024-26582?
To fix CVE-2024-26582, update the kernel to version 6.8 or a later version for Red Hat, or apply the recommended patches for Debian versions listed.
Which systems are affected by CVE-2024-26582?
CVE-2024-26582 affects certain versions of the Linux kernel, specifically between 6.0 and 6.1.79, as well as specific versions within 6.2.0 to 6.7.6.
What does the CVE-2024-26582 vulnerability impact?
The CVE-2024-26582 vulnerability impacts the network transport layer due to improper handling of TLS decryption resulting in potential memory safety issues.
Is CVE-2024-26582 actively being exploited?
There is currently no public information indicating that CVE-2024-26582 is being actively exploited in the wild, but it should be patched promptly.