CVE-2024-58053: rxrpc: Fix handling of received connection abort
In the Linux kernel, the following vulnerability has been resolved:
rxrpc: Fix handling of received connection abort
Fix the handling of a connection abort that we've received. Though the abort is at the connection level, it needs propagating to the calls on that connection. Whilst the propagation bit is performed, the calls aren't then woken up to go and process their termination, and as no further input is forthcoming, they just hang.
Also add some tracing for the logging of connection aborts.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-58053?
CVE-2024-58053 is classified as high severity due to its potential impact on connection integrity within the Linux Kernel.
How do I fix CVE-2024-58053?
To fix CVE-2024-58053, update your Linux Kernel to the latest patched version that addresses this vulnerability.
What are the potential impacts of CVE-2024-58053?
The potential impacts of CVE-2024-58053 include possible Denial of Service due to improper handling of connection aborts that could affect ongoing calls.
Which versions of the Linux Kernel are affected by CVE-2024-58053?
CVE-2024-58053 affects multiple versions of the Linux Kernel prior to the patch, specific version details can be obtained from the release notes.
Is CVE-2024-58053 being actively exploited in the wild?
There is currently no public information indicating that CVE-2024-58053 is being actively exploited in the wild.