Linux · Linux Kernel · CVE-2023-28466
**Name of the Vulnerable Software and Affected Versions**
Linux kernel versions prior to 6.2.7
**Description**
The issue is related to a race condition in the Linux kernel's TLS protocol implementation, specifically in the `do tls getsockopt conf()` and `do tls setsockopt conf()` functions in the `net/tls/tls main.c` module. This is due to the lack of synchronization in `do tls getsockopt conf()`, allowing for concurrent access to `ctx->crypto send.info`. Exploitation of this issue can lead to a denial of service. The `do tls getsockopt` function lacks a `lock sock` call, resulting in a race condition that can cause a use-after-free or NULL pointer dereference.
**Recommendations**
For Linux kernel versions prior to 6.2.7, update to version 6.2.7 or later to resolve the issue. As a temporary workaround, consider restricting access to the `net/tls/tls main.c` module to minimize the risk of exploitation. Avoid using the `do tls getsockopt` function in the affected API endpoint until the issue is resolved.