CVE-2024-26585

CVSS 3.1 Score 4.7 of 10 (medium)

Details

Published Feb 21, 2024
Updated: Aug 19, 2024
CWE ID 362

Summary

CVE-2024-26585 is a vulnerability affecting the Linux kernel that has been addressed. It involves a race condition between the scheduling of transmission work and the closing of a socket. Previously, the async crypto handler could call the 'complete()' function before the submitting thread had finished scheduling the work, leading to unintended consequences. To mitigate this issue, the order of operations has been reversed, with the work being scheduled before the 'complete()' function is called. This approach better aligns with the expected order of events from the perspective of the submitting thread.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share