rxrpc: Fix handling of received connection abort
In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix handling of received connection abort Fix the handling of a connection abort that we've received. Though the abort is at the connection level, it needs propagating to the calls on that connection. Whilst the propagation bit is performed, the calls aren't then woken up to go and process their termination, and as no further input is forthcoming, they just hang. Also add some tracing for the logging of connection aborts.
CVE-2024-58053
Primary source · Revision 1
Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.
Security context
Source reference: cve:CVE-2024-58053
Linux
Source reference: /containers/cna/affected/0/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Linux
Source reference: /containers/cna/affected/1/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Structured affected-version data
Original package identities and version rules from this source.
[
{
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"vendor": "Linux",
"product": "Linux",
"versions": [
{
"status": "affected",
"version": "248f219cb8bcbfbd7f132752d44afa2df7c241d1",
"lessThan": "9c6702260557c0183d8417c79a37777a3d3e58e8",
"versionType": "git"
},
{
"status": "affected",
"version": "248f219cb8bcbfbd7f132752d44afa2df7c241d1",
"lessThan": "5842ce7b120c65624052a8da04460d35b26caac0",
"versionType": "git"
},
{
"status": "affected",
"version": "248f219cb8bcbfbd7f132752d44afa2df7c241d1",
"lessThan": "96d1d927c4d03ee9dcee7640bca70b74e63504fc",
"versionType": "git"
},
{
"status": "affected",
"version": "248f219cb8bcbfbd7f132752d44afa2df7c241d1",
"lessThan": "0e56ebde245e4799ce74d38419426f2a80d39950",
"versionType": "git"
}
],
"programFiles": [
"include/trace/events/rxrpc.h",
"net/rxrpc/conn_event.c"
],
"defaultStatus": "unaffected"
},
{
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"vendor": "Linux",
"product": "Linux",
"versions": [
{
"status": "affected",
"version": "4.9"
},
{
"status": "unaffected",
"version": "0",
"lessThan": "4.9",
"versionType": "semver"
},
{
"status": "unaffected",
"version": "6.6.76",
"versionType": "semver",
"lessThanOrEqual": "6.6.*"
},
{
"status": "unaffected",
"version": "6.12.13",
"versionType": "semver",
"lessThanOrEqual": "6.12.*"
},
{
"status": "unaffected",
"version": "6.13.2",
"versionType": "semver",
"lessThanOrEqual": "6.13.*"
},
{
"status": "unaffected",
"version": "6.14",
"versionType": "original_commit_for_fix",
"lessThanOrEqual": "*"
}
],
"programFiles": [
"include/trace/events/rxrpc.h",
"net/rxrpc/conn_event.c"
],
"defaultStatus": "affected"
}
]- Related CVEs
- CVE-2024-58053
Source reference:
/cveMetadata/cveId
Publisher severity
high
Source reference: /containers/cna/metrics
- Event
- #30414 · Revision 1
- Added to Heist Feed
- Publisher date