• caglararli@hotmail.com
  • 05386281520

CVE-2024-26585 | Linux Kernel up to 4.19/6.8-rc4 TLS net/tls/tls_sw.c 16 tls_encrypt_done use after free (e01e3934a1b2)

Çağlar Arlı      -    13 Views

CVE-2024-26585 | Linux Kernel up to 4.19/6.8-rc4 TLS net/tls/tls_sw.c 16 tls_encrypt_done use after free (e01e3934a1b2)

A vulnerability was found in Linux Kernel up to 4.19/6.8-rc4 and classified as problematic. This issue affects the function tls_encrypt_done of the file net/tls/tls_sw.c 16 of the component TLS Handler. The manipulation leads to use after free. The identification of this vulnerability is CVE-2024-26585. Access to the local network is required for this attack. There is no exploit available. It is recommended to upgrade the affected component.