CVE-2024-58053

CVE-2024-58053

High · published March 6, 2025

CVSS v3.1
7.5
EPSS
0%
Percentile
39.1
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

rxrpc: Fix handling of received connection abort

Fix the handling of a connection abort that we've received. Though the

abort is at the connection level, it needs propagating to the calls on that

connection. Whilst the propagation bit is performed, the calls aren't then

woken up to go and process their termination, and as no further input is

forthcoming, they just hang.

Also add some tracing for the logging of connection aborts.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00463 · 39.1th percentile
Published
2025-03-06T21:15Z
Affected products (3)
ProductVersionsFixed in
linux/linux_kernel≥ 4.9, < 6.6.766.6.76
linux/linux_kernel≥ 6.7, < 6.12.136.12.13
linux/linux_kernel≥ 6.13, < 6.13.26.13.2
References (4)
EPSS history
Timeline
  • 06 MAR 15:53Z
    rxrpc: Fix handling of received connection abort
    cvelistv5