CVE-2024-58240CWE-416

CVE-2024-58240

Critical · published August 28, 2025

CVSS v3.1
9.8
EPSS
0%
Percentile
25.0
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

tls: separate no-async decryption request handling from async

If we're not doing async, the handling is much simpler. There's no

reference counting, we just need to wait for the completion to wake us

up and return its result.

We should preferably also use a separate crypto_wait. I'm not seeing a

UAF as I did in the past, I think aec7961916f3 ("tls: fix race between

async notify and socket close") took care of it.

This will make the next fix easier.

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00331 · 25.0th percentile
Weakness
CWE-416 · Use After Free
Published
2025-08-28T14:15Z
Affected products (10)
ProductVersionsFixed in
linux/linux_kernel≥ 4.13, < 6.1.1496.1.149
linux/linux_kernel≥ 6.2, < 6.6.216.6.21
linux/linux_kernel≥ 6.7, < 6.7.96.7.9
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
debian/debian_linuxall versions—
References (8)
EPSS history
Timeline
  • 28 AUG 09:40Z
    tls: separate no-async decryption request handling from async
    cvelistv5