Количество 26
Количество 26
CVE-2026-23240
In the Linux kernel, the following vulnerability has been resolved: tls: Fix race condition in tls_sw_cancel_work_tx() This issue was discovered during a code audit. After cancel_delayed_work_sync() is called from tls_sk_proto_close(), tx_work_handler() can still be scheduled from paths such as the Delayed ACK handler or ksoftirqd. As a result, the tx_work_handler() worker may dereference a freed TLS object. The following is a simple race scenario: cpu0 cpu1 tls_sk_proto_close() tls_sw_cancel_work_tx() tls_write_space() tls_sw_write_space() if (!test_and_set_bit(BIT_TX_SCHEDULED, &tx_ctx->tx_bitmask)) set_bit(BIT_TX_SCHEDULED, &ctx->tx_bitmask); cancel_delayed_work_sync(&ctx->tx_work.work); schedule_delayed_work(&tx_ctx->tx_work.work, 0); To prevent this race condition, cancel_delayed_work_sync() is replaced with disable_delayed_work_sync().
CVE-2026-23240
In the Linux kernel, the following vulnerability has been resolved: tls: Fix race condition in tls_sw_cancel_work_tx() This issue was discovered during a code audit. After cancel_delayed_work_sync() is called from tls_sk_proto_close(), tx_work_handler() can still be scheduled from paths such as the Delayed ACK handler or ksoftirqd. As a result, the tx_work_handler() worker may dereference a freed TLS object. The following is a simple race scenario: cpu0 cpu1 tls_sk_proto_close() tls_sw_cancel_work_tx() tls_write_space() tls_sw_write_space() if (!test_and_set_bit(BIT_TX_SCHEDULED, &tx_ctx->tx_bitmask)) set_bit(BIT_TX_SCHEDULED, &ctx->tx_bitmask); cancel_delayed_work_sync(&ctx->tx_work.work); schedule_delayed_work(&tx_ctx->tx_work.work, 0); To prevent this race condition, cancel_delayed_work_sync() is replaced with disable_delayed_work_sync().
CVE-2026-23240
In the Linux kernel, the following vulnerability has been resolved: tls: Fix race condition in tls_sw_cancel_work_tx() This issue was discovered during a code audit. After cancel_delayed_work_sync() is called from tls_sk_proto_close(), tx_work_handler() can still be scheduled from paths such as the Delayed ACK handler or ksoftirqd. As a result, the tx_work_handler() worker may dereference a freed TLS object. The following is a simple race scenario: cpu0 cpu1 tls_sk_proto_close() tls_sw_cancel_work_tx() tls_write_space() tls_sw_write_space() if (!test_and_set_bit(BIT_TX_SCHEDULED, &tx_ctx->tx_bitmask)) set_bit(BIT_TX_SCHEDULED, &ctx->tx_bitmask); cancel_delayed_work_sync(&ctx->tx_work.work); schedule_delayed_work(&tx_ctx->tx_work.work, 0); To prevent this race condition, cancel_delayed_work_sync()
CVE-2026-23240
tls: Fix race condition in tls_sw_cancel_work_tx()
CVE-2026-23240
In the Linux kernel, the following vulnerability has been resolved: t ...
GHSA-c96v-vvf3-2p7r
In the Linux kernel, the following vulnerability has been resolved: tls: Fix race condition in tls_sw_cancel_work_tx() This issue was discovered during a code audit. After cancel_delayed_work_sync() is called from tls_sk_proto_close(), tx_work_handler() can still be scheduled from paths such as the Delayed ACK handler or ksoftirqd. As a result, the tx_work_handler() worker may dereference a freed TLS object. The following is a simple race scenario: cpu0 cpu1 tls_sk_proto_close() tls_sw_cancel_work_tx() tls_write_space() tls_sw_write_space() if (!test_and_set_bit(BIT_TX_SCHEDULED, &tx_ctx->tx_bitmask)) set_bit(BIT_TX_SCHEDULED, &ctx->tx_bitmask); cancel_delayed_work_sync(&ctx->tx_work.work); schedule_delayed_work(&tx_ctx->tx_work.work, 0); To prevent this race condition, cancel_delayed_work_syn...
SUSE-SU-2026:3354-1
Security update for the Linux Kernel (Live Patch 51 for SUSE Linux Enterprise 15 SP4)
SUSE-SU-2026:3345-1
Security update for the Linux Kernel (Live Patch 50 for SUSE Linux Enterprise 15 SP4)
SUSE-SU-2026:3319-1
Security update for the Linux Kernel (Live Patch 38 for SUSE Linux Enterprise 15 SP5)
SUSE-SU-2026:3289-1
Security update for the Linux Kernel (Live Patch 28 for SUSE Linux Enterprise 15 SP5)
SUSE-SU-2026:3343-1
Security update for the Linux Kernel (Live Patch 6 for SUSE Linux Enterprise 15 SP7)
SUSE-SU-2026:3321-1
Security update for the Linux Kernel (Live Patch 3 for SUSE Linux Enterprise 15 SP7)
SUSE-SU-2026:3316-1
Security update for the Linux Kernel (Live Patch 5 for SUSE Linux Enterprise 15 SP7)
SUSE-SU-2026:3286-1
Security update for the Linux Kernel (Live Patch 9 for SUSE Linux Enterprise 15 SP7)
SUSE-SU-2026:3264-1
Security update for the Linux Kernel (Live Patch 12 for SUSE Linux Enterprise 15 SP7)
SUSE-SU-2026:3256-1
Security update for the Linux Kernel (Live Patch 14 for SUSE Linux Enterprise 15 SP7)
SUSE-SU-2026:3254-1
Security update for the Linux Kernel (Live Patch 25 for SUSE Linux Enterprise 15 SP6)
SUSE-SU-2026:3246-1
Security update for the Linux Kernel RT (Live Patch 14 for SUSE Linux Enterprise 15 SP7)
ELSA-2026-50260
ELSA-2026-50260: Unbreakable Enterprise kernel security update (IMPORTANT)
openSUSE-SU-2026:20572-1
Security update for the Linux Kernel
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2026-23240 In the Linux kernel, the following vulnerability has been resolved: tls: Fix race condition in tls_sw_cancel_work_tx() This issue was discovered during a code audit. After cancel_delayed_work_sync() is called from tls_sk_proto_close(), tx_work_handler() can still be scheduled from paths such as the Delayed ACK handler or ksoftirqd. As a result, the tx_work_handler() worker may dereference a freed TLS object. The following is a simple race scenario: cpu0 cpu1 tls_sk_proto_close() tls_sw_cancel_work_tx() tls_write_space() tls_sw_write_space() if (!test_and_set_bit(BIT_TX_SCHEDULED, &tx_ctx->tx_bitmask)) set_bit(BIT_TX_SCHEDULED, &ctx->tx_bitmask); cancel_delayed_work_sync(&ctx->tx_work.work); schedule_delayed_work(&tx_ctx->tx_work.work, 0); To prevent this race condition, cancel_delayed_work_sync() is replaced with disable_delayed_work_sync(). | CVSS3: 9.8 | 0% Низкий | 5 месяцев назад |
 | CVE-2026-23240 In the Linux kernel, the following vulnerability has been resolved: tls: Fix race condition in tls_sw_cancel_work_tx() This issue was discovered during a code audit. After cancel_delayed_work_sync() is called from tls_sk_proto_close(), tx_work_handler() can still be scheduled from paths such as the Delayed ACK handler or ksoftirqd. As a result, the tx_work_handler() worker may dereference a freed TLS object. The following is a simple race scenario: cpu0 cpu1 tls_sk_proto_close() tls_sw_cancel_work_tx() tls_write_space() tls_sw_write_space() if (!test_and_set_bit(BIT_TX_SCHEDULED, &tx_ctx->tx_bitmask)) set_bit(BIT_TX_SCHEDULED, &ctx->tx_bitmask); cancel_delayed_work_sync(&ctx->tx_work.work); schedule_delayed_work(&tx_ctx->tx_work.work, 0); To prevent this race condition, cancel_delayed_work_sync() is replaced with disable_delayed_work_sync(). | CVSS3: 5.8 | 0% Низкий | 5 месяцев назад |
 | CVE-2026-23240 In the Linux kernel, the following vulnerability has been resolved: tls: Fix race condition in tls_sw_cancel_work_tx() This issue was discovered during a code audit. After cancel_delayed_work_sync() is called from tls_sk_proto_close(), tx_work_handler() can still be scheduled from paths such as the Delayed ACK handler or ksoftirqd. As a result, the tx_work_handler() worker may dereference a freed TLS object. The following is a simple race scenario: cpu0 cpu1 tls_sk_proto_close() tls_sw_cancel_work_tx() tls_write_space() tls_sw_write_space() if (!test_and_set_bit(BIT_TX_SCHEDULED, &tx_ctx->tx_bitmask)) set_bit(BIT_TX_SCHEDULED, &ctx->tx_bitmask); cancel_delayed_work_sync(&ctx->tx_work.work); schedule_delayed_work(&tx_ctx->tx_work.work, 0); To prevent this race condition, cancel_delayed_work_sync() | CVSS3: 9.8 | 0% Низкий | 5 месяцев назад |
 | CVE-2026-23240 tls: Fix race condition in tls_sw_cancel_work_tx() | 0% Низкий | 5 месяцев назад | |
| CVE-2026-23240 In the Linux kernel, the following vulnerability has been resolved: t ... | CVSS3: 9.8 | 0% Низкий | 5 месяцев назад |
| GHSA-c96v-vvf3-2p7r In the Linux kernel, the following vulnerability has been resolved: tls: Fix race condition in tls_sw_cancel_work_tx() This issue was discovered during a code audit. After cancel_delayed_work_sync() is called from tls_sk_proto_close(), tx_work_handler() can still be scheduled from paths such as the Delayed ACK handler or ksoftirqd. As a result, the tx_work_handler() worker may dereference a freed TLS object. The following is a simple race scenario: cpu0 cpu1 tls_sk_proto_close() tls_sw_cancel_work_tx() tls_write_space() tls_sw_write_space() if (!test_and_set_bit(BIT_TX_SCHEDULED, &tx_ctx->tx_bitmask)) set_bit(BIT_TX_SCHEDULED, &ctx->tx_bitmask); cancel_delayed_work_sync(&ctx->tx_work.work); schedule_delayed_work(&tx_ctx->tx_work.work, 0); To prevent this race condition, cancel_delayed_work_syn... | CVSS3: 9.8 | 0% Низкий | 5 месяцев назад |
 | SUSE-SU-2026:3354-1 Security update for the Linux Kernel (Live Patch 51 for SUSE Linux Enterprise 15 SP4) | 8 дней назад | ||
| SUSE-SU-2026:3345-1 Security update for the Linux Kernel (Live Patch 50 for SUSE Linux Enterprise 15 SP4) | 8 дней назад | ||
| SUSE-SU-2026:3319-1 Security update for the Linux Kernel (Live Patch 38 for SUSE Linux Enterprise 15 SP5) | 9 дней назад | ||
| SUSE-SU-2026:3289-1 Security update for the Linux Kernel (Live Patch 28 for SUSE Linux Enterprise 15 SP5) | 9 дней назад | ||
| SUSE-SU-2026:3343-1 Security update for the Linux Kernel (Live Patch 6 for SUSE Linux Enterprise 15 SP7) | 8 дней назад | ||
| SUSE-SU-2026:3321-1 Security update for the Linux Kernel (Live Patch 3 for SUSE Linux Enterprise 15 SP7) | 9 дней назад | ||
| SUSE-SU-2026:3316-1 Security update for the Linux Kernel (Live Patch 5 for SUSE Linux Enterprise 15 SP7) | 9 дней назад | ||
| SUSE-SU-2026:3286-1 Security update for the Linux Kernel (Live Patch 9 for SUSE Linux Enterprise 15 SP7) | 9 дней назад | ||
| SUSE-SU-2026:3264-1 Security update for the Linux Kernel (Live Patch 12 for SUSE Linux Enterprise 15 SP7) | 10 дней назад | ||
| SUSE-SU-2026:3256-1 Security update for the Linux Kernel (Live Patch 14 for SUSE Linux Enterprise 15 SP7) | 10 дней назад | ||
| SUSE-SU-2026:3254-1 Security update for the Linux Kernel (Live Patch 25 for SUSE Linux Enterprise 15 SP6) | 10 дней назад | ||
| SUSE-SU-2026:3246-1 Security update for the Linux Kernel RT (Live Patch 14 for SUSE Linux Enterprise 15 SP7) | 12 дней назад | ||
| ELSA-2026-50260 ELSA-2026-50260: Unbreakable Enterprise kernel security update (IMPORTANT) | 3 месяца назад | ||
| openSUSE-SU-2026:20572-1 Security update for the Linux Kernel | 4 месяца назад |
Уязвимостей на страницу