Riskcovery

CVE-2024-35908

tls: get psock ref after taking rxlock to avoid leak

State
Published
Severity
Not scored
Published
May 19, 2024
Updated
May 11, 2026
Reserved
May 17, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

tls: get psock ref after taking rxlock to avoid leak

At the start of tls_sw_recvmsg, we take a reference on the psock, and then call tls_rx_reader_lock. If that fails, we return directly without releasing the reference.

Instead of adding a new label, just take the reference after locking has succeeded, since we don't need it before.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 4cbc325ed6b4dce4910be06d9d6940a8b919c59b to before 30fabe50a7ace3e9d57cf7f9288f33ea408491c8Affected
  • 4cbc325ed6b4dce4910be06d9d6940a8b919c59b to before f1b7f14130d782433bc98c1e1e41ce6b4d4c3096Affected
  • 4cbc325ed6b4dce4910be06d9d6940a8b919c59b to before b565d294e3d5aa809566a4d819835da11997d8b3Affected
  • 4cbc325ed6b4dce4910be06d9d6940a8b919c59b to before 417e91e856099e9b8a42a2520e2255e6afe024beAffected
LinuxLinux
  • 6.0Affected
  • before 6.0Not affected
  • 6.1.85 through 6.1.*Not affected
  • 6.6.26 through 6.6.*Not affected
  • 6.8.5 through 6.8.*Not affected
  • 6.9 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.