• caglararli@hotmail.com
  • 05386281520

CVE-2024-26582 | Linux Kernel up to 5.x/6.8-rc4 TLS net/tls/tls_sw.c put_page use after free (32b55c5ff910)

Çağlar Arlı      -    14 Views

CVE-2024-26582 | Linux Kernel up to 5.x/6.8-rc4 TLS net/tls/tls_sw.c put_page use after free (32b55c5ff910)

A vulnerability was found in Linux Kernel up to 5.x/6.8-rc4. It has been classified as problematic. Affected is the function put_page of the file net/tls/tls_sw.c of the component TLS Handler. The manipulation leads to use after free. This vulnerability is traded as CVE-2024-26582. Access to the local network is required for this attack to succeed. There is no exploit available. It is recommended to upgrade the affected component.