• caglararli@hotmail.com
  • 05386281520

CVE-2024-26583 | Linux Kernel up to 5.6/6.8-rc4 TLS net/tls/tls_sw.c tls_decrypt_done use after free (aec7961916f3)

Çağlar Arlı      -    14 Views

CVE-2024-26583 | Linux Kernel up to 5.6/6.8-rc4 TLS net/tls/tls_sw.c tls_decrypt_done use after free (aec7961916f3)

A vulnerability has been found in Linux Kernel up to 5.6/6.8-rc4 and classified as problematic. This vulnerability affects the function tls_decrypt_done of the file net/tls/tls_sw.c of the component TLS Handler. The manipulation leads to use after free. This vulnerability was named CVE-2024-26583. The attack needs to be initiated within the local network. There is no exploit available. It is recommended to upgrade the affected component.