Linux Kernel Vulnerability in TLS Processing Affects Multiple Distributions

CVE-2024-58239

What is CVE-2024-58239?

A vulnerability in the Linux kernel's TLS processing mechanism could lead to improper handling of certain types of incoming records. Specifically, when the process_rx_list function encounters a non-DATA record on the reception list, it may inadvertently merge it with other records still queued for processing. This flaw can disrupt the intended data flow, potentially allowing further records of the same type to be processed incorrectly. The vulnerability necessitates a more stringent validation mechanism to ensure proper record types are handled appropriately, thus preventing any unintended merging and subsequent processing errors.

References