CVE-2023-28466

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.2.7

Description The issue is related to a race condition in the Linux kernel's TLS protocol implementation, specifically in the do tls getsockopt conf() and do tls setsockopt conf() functions in the net/tls/tls main.c module. This is due to the lack of synchronization in do tls getsockopt conf(), allowing for concurrent access to ctx->crypto send.info. Exploitation of this issue can lead to a denial of service. The do tls getsockopt function lacks a lock sock call, resulting in a race condition that can cause a use-after-free or NULL pointer dereference.

Recommendations For Linux kernel versions prior to 6.2.7, update to version 6.2.7 or later to resolve the issue. As a temporary workaround, consider restricting access to the net/tls/tls main.c module to minimize the risk of exploitation. Avoid using the do tls getsockopt function in the affected API endpoint until the issue is resolved.