QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2024-26582

Back to search

CVE-2024-26582

Published: Feb 21, 2024

Modified: May 11, 2026

PUBLISHED

Description

In the Linux kernel, the following vulnerability has been resolved: net: tls: fix use-after-free with partial reads and async decrypt tls_decrypt_sg doesn't take a reference on the pages from clear_skb, so the put_page() in tls_decrypt_done releases them, and we trigger a use-after-free in process_rx_list when we try to read from the partially-read skb.

VendorProductVersions

Linux

Linux

affected
fd31f3996af2627106e22a9f8072764fede51161 - < 20b4ed034872b4d024b26e2bc1092c3f80e5db96
affected
fd31f3996af2627106e22a9f8072764fede51161 - < d684763534b969cca1022e2a28645c7cc91f7fa5
affected
fd31f3996af2627106e22a9f8072764fede51161 - < 754c9bab77a1b895b97bd99d754403c505bc79df
affected
fd31f3996af2627106e22a9f8072764fede51161 - < 32b55c5ff9103b8508c1e04bfa5a08c64e7a925f

Linux

Linux

affected
6.0
unaffected
0 - < 6.0
unaffected
6.1.79 - <= 6.1.*
unaffected
6.6.18 - <= 6.6.*
unaffected
6.7.6 - <= 6.7.*

+1 more versions

References

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now