NetSight
IP …
high7.0

CVE-2023-28466

do_tls_getsockopt in net/tls/tls_main.c in the Linux kernel through 6.2.6 lacks a lock_sock call, leading to a race condition (with a resultant use-after-free …

Impact

do_tls_getsockopt in net/tls/tls_main.c in the Linux kernel through 6.2.6 lacks a lock_sock call, leading to a race condition (with a resultant use-after-free or NULL pointer dereference).

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 4.13 through 5.4.240
from 5.5 before 5.10.177
from 5.11 before 5.15.105
from 5.16 before 6.1.20
from 6.2 before 6.2.7
NetappH300s
All versions
NetappH410c
All versions
NetappH410s
All versions
NetappH500s
All versions
NetappH700s
All versions
DebianDebian Linux
Version 10.0

Weakness classification

CWE-476

References