Lucene search

K
redhatcveRedhat.comRH:CVE-2024-35908
HistoryMay 20, 2024 - 11:14 a.m.

CVE-2024-35908

2024-05-2011:14:30
redhat.com
access.redhat.com
15
linux kernel
tls vulnerability
rxlock

AI Score

6.5

Confidence

Low

EPSS

0

Percentile

15.5%

In the Linux kernel, the following vulnerability has been resolved: tls: get psock ref after taking rxlock to avoid leak At the start of tls_sw_recvmsg, we take a reference on the psock, and then call tls_rx_reader_lock. If that fails, we return directly without releasing the reference. Instead of adding a new label, just take the reference after locking has succeeded, since we don’t need it before.

AI Score

6.5

Confidence

Low

EPSS

0

Percentile

15.5%