CVE-2024-26585

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The issue is related to a synchronization error when using a shared resource in the Linux kernel's tls encrypt done function. This can lead to a denial of service. The problem arises from a race between tx work scheduling and socket close, where the submitting thread may exit as soon as the async crypto handler calls complete. To fix this, the scheduling of work is reordered to occur before calling complete, which is a more logical approach.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.