阿里云漏洞库

CVE编号

CVE-2024-26585

利用情况

暂无

补丁情况

官方补丁

披露时间

2024-02-21

In the Linux kernel, the following vulnerability has been resolved:

tls: fix race between tx work scheduling and socket close

Similarly to previous commit, the submitting thread (recvmsg/sendmsg)

may exit as soon as the async crypto handler calls complete().

Reorder scheduling the work before calling complete().

This seems more logical in the first place, as it's

the inverse order of what the submitting thread will do.

建议您更新当前系统或软件至最新版，完成漏洞的修复。

参考链接
https://git.kernel.org/stable/c/196f198ca6fce04ba6ce262f5a0e4d567d7d219d
https://git.kernel.org/stable/c/6db22d6c7a6dc914b12c0469b94eb639b6a8a146
https://git.kernel.org/stable/c/e01e3934a1b2d122919f73bc6ddbe1cdafc4bbdb
https://git.kernel.org/stable/c/e327ed60bff4a991cd7a709c47c4f0c5b4a4fd57

CWE-ID	漏洞类型
CWE-362	使用共享资源的并发执行不恰当同步问题（竞争条件）