Critical · published May 3, 2024
In the Linux kernel, the following vulnerability has been resolved:
nvme-tcp: fix UAF when detecting digest errors
We should also bail from the io_work loop when we set rd_enabled to true,
so we don't attempt to read data from the socket when the TCP stream is
already out-of-sync or corrupted.
| Product | Versions | Fixed in |
|---|---|---|
| linux/linux_kernel | ≥ 5.0, < 5.4.213 | 5.4.213 |
| linux/linux_kernel | ≥ 5.5, < 5.10.143 | 5.10.143 |
| linux/linux_kernel | ≥ 5.11, < 5.15.68 | 5.15.68 |
| linux/linux_kernel | ≥ 5.16, < 5.19.9 | 5.19.9 |