tls: stop recv() if initial process_rx_list gave us non-DATA
In the Linux kernel, the following vulnerability has been resolved: tls: stop recv() if initial process_rx_list gave us non-DATA If we have a non-DATA record on the rx_list and another record of the same type still on the queue, we will end up merging them: - process_rx_list copies the non-DATA record - we start the loop and process the first available record since it's of the same type - we break out of the loop since the record was not DATA Just check the record type and jump to the end in case process_rx_list did some work.
CVE-2024-58239
Primary source · Revision 1
Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.
Security context
Source reference: cve:CVE-2024-58239
Linux
Source reference: /containers/cna/affected/0/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Linux
Source reference: /containers/cna/affected/1/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Structured affected-version data
Original package identities and version rules from this source.
[
{
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"vendor": "Linux",
"product": "Linux",
"versions": [
{
"status": "affected",
"version": "692d7b5d1f9125a1cf0595e979e3b5fb7210547e",
"lessThan": "f310143961e2d9a0479fca117ce869f8aaecc140",
"versionType": "git"
},
{
"status": "affected",
"version": "692d7b5d1f9125a1cf0595e979e3b5fb7210547e",
"lessThan": "31e10d6cb0c9532ff070cf50da1657c3acee9276",
"versionType": "git"
},
{
"status": "affected",
"version": "692d7b5d1f9125a1cf0595e979e3b5fb7210547e",
"lessThan": "4338032aa90bd1d5b33a4274e8fa8347cda5ee09",
"versionType": "git"
},
{
"status": "affected",
"version": "692d7b5d1f9125a1cf0595e979e3b5fb7210547e",
"lessThan": "6756168add1c6c3ef1c32c335bb843a5d1f99a75",
"versionType": "git"
},
{
"status": "affected",
"version": "692d7b5d1f9125a1cf0595e979e3b5fb7210547e",
"lessThan": "3b952d8fdfcf6fd8ea0b8954bc9277642cf0977f",
"versionType": "git"
},
{
"status": "affected",
"version": "692d7b5d1f9125a1cf0595e979e3b5fb7210547e",
"lessThan": "a4ed943882a8fc057ea5a67643314245e048bbdd",
"versionType": "git"
},
{
"status": "affected",
"version": "692d7b5d1f9125a1cf0595e979e3b5fb7210547e",
"lessThan": "fdfbaec5923d9359698cbb286bc0deadbb717504",
"versionType": "git"
}
],
"programFiles": [
"net/tls/tls_sw.c"
],
"defaultStatus": "unaffected"
},
{
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"vendor": "Linux",
"product": "Linux",
"versions": [
{
"status": "affected",
"version": "5.1"
},
{
"status": "unaffected",
"version": "0",
"lessThan": "5.1",
"versionType": "semver"
},
{
"status": "unaffected",
"version": "5.4.270",
"versionType": "semver",
"lessThanOrEqual": "5.4.*"
},
{
"status": "unaffected",
"version": "5.10.211",
"versionType": "semver",
"lessThanOrEqual": "5.10.*"
},
{
"status": "unaffected",
"version": "5.15.150",
"versionType": "semver",
"lessThanOrEqual": "5.15.*"
},
{
"status": "unaffected",
"version": "6.1.80",
"versionType": "semver",
"lessThanOrEqual": "6.1.*"
},
{
"status": "unaffected",
"version": "6.6.19",
"versionType": "semver",
"lessThanOrEqual": "6.6.*"
},
{
"status": "unaffected",
"version": "6.7.7",
"versionType": "semver",
"lessThanOrEqual": "6.7.*"
},
{
"status": "unaffected",
"version": "6.8",
"versionType": "original_commit_for_fix",
"lessThanOrEqual": "*"
}
],
"programFiles": [
"net/tls/tls_sw.c"
],
"defaultStatus": "affected"
}
]- Related CVEs
- CVE-2024-58239
Source reference:
/cveMetadata/cveId
Publisher severity
high
Source reference: /containers/cna/metrics
- Event
- #30420 · Revision 1
- Added to Heist Feed
- Publisher date