CVE-2024-58240
Unknown Unknown - Not Provided
BaseFortify

Publication date: 2025-08-28

Last updated on: 2025-11-03

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: tls: separate no-async decryption request handling from async If we're not doing async, the handling is much simpler. There's no reference counting, we just need to wait for the completion to wake us up and return its result. We should preferably also use a separate crypto_wait. I'm not seeing a UAF as I did in the past, I think aec7961916f3 ("tls: fix race between async notify and socket close") took care of it. This will make the next fix easier.
CVSS Scores
EPSS Scores
Probability:
Percentile:
Meta Information
Published
2025-08-28
Last Modified
2025-11-03
Generated
2026-05-27
AI Q&A
2025-08-28
EPSS Evaluated
2026-05-25
NVD
CVE-2024-58240
Affected Vendors & Products
Showing 1 associated CPE
Vendor Product Version / Range
linux linux_kernel 6.1.153
Helpful Resources
Exploitability
CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?

This vulnerability relates to the Linux kernel's TLS (Transport Layer Security) implementation. It involves the handling of decryption requests when asynchronous processing is not used. The fix separates the handling of no-async decryption requests from async ones to simplify the process, avoiding complex reference counting and ensuring proper waiting for completion. This change addresses potential issues such as use-after-free (UAF) errors that were previously mitigated by earlier fixes.


How can this vulnerability impact me? :

If unpatched, this vulnerability could lead to race conditions or use-after-free errors in the Linux kernel's TLS decryption process, potentially causing system instability or security issues such as crashes or exploitation by attackers. The fix improves the reliability and security of TLS decryption handling in the kernel.


Ask Our AI Assistant
Need more information? Ask your question to get an AI reply (Powered by our expertise)
0/70
EPSS Chart