NetSight
IP …
medium5.5

CVE-2024-35908

In the Linux kernel, the following vulnerability has been resolved: tls: get psock ref after taking rxlock to avoid leak At the start of tls_sw_recvmsg, we tak…

Impact

In the Linux kernel, the following vulnerability has been resolved: tls: get psock ref after taking rxlock to avoid leak At the start of tls_sw_recvmsg, we take a reference on the psock, and then call tls_rx_reader_lock. If that fails, we return directly without releasing the reference. Instead of adding a new label, just take the reference after locking has succeeded, since we don't need it before.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 6.0 before 6.1.85
from 6.2 before 6.6.26
from 6.7 before 6.8.5
Version 6.9

Weakness classification

CWE-401

References