CVE-2024-26582

net: tls: fix use-after-free with partial reads and async decrypt

State: Published
Severity: 9.8 Critical
Published: Feb 21, 2024
Updated: Aug 5, 2026
Reserved: Feb 19, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

net: tls: fix use-after-free with partial reads and async decrypt

tls_decrypt_sg doesn't take a reference on the pages from clear_skb, so the put_page() in tls_decrypt_done releases them, and we trigger a use-after-free in process_rx_list when we try to read from the partially-read skb.

Scores

CVSS	Score	Vector	Source
3.1	9.8 Critical	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	Linux

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	fd31f3996af2627106e22a9f8072764fede51161 to before 20b4ed034872b4d024b26e2bc1092c3f80e5db96Affected fd31f3996af2627106e22a9f8072764fede51161 to before d684763534b969cca1022e2a28645c7cc91f7fa5Affected fd31f3996af2627106e22a9f8072764fede51161 to before 754c9bab77a1b895b97bd99d754403c505bc79dfAffected fd31f3996af2627106e22a9f8072764fede51161 to before 32b55c5ff9103b8508c1e04bfa5a08c64e7a925fAffected
LinuxLinux	6.0Affected before 6.0Not affected 6.1.79 through 6.1.Not affected 6.6.18 through 6.6.Not affected 6.7.6 through 6.7.*Not affected 6.8 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.