PT-2024-35555 · Linux+7 · Linux Kernel+7
Zijian Zhang
·
Published
2024-11-06
·
Updated
2026-05-26
·
CVE-2024-53091
CVSS v3.1
5.5
Medium
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel versions prior to 6.6.65
Description
A vulnerability in the Linux kernel has been resolved. The issue is related to the introduction of support for vsock and unix sockets in sockmap, where the function
tls sw has ctx tx/rx cannot presume the socket passed in must be IS ICSK. This can cause tls get ctx to return an invalid pointer and result in a page fault in the function tls sw ctx rx. The error is characterized by an inability to handle a page fault for a specific address. Technical details include the involvement of sk psock strp data ready and virtio transport recv pkt functions.Recommendations
To resolve the issue, update to Linux kernel version 6.6.65 or later. As a temporary workaround, consider restricting the use of the vulnerable
tls sw has ctx tx/rx function until a patch is available. Additionally, be cautious when using vsock and af unix sockets, as they may be affected by this issue.Exploit
Fix
NULL Pointer Dereference
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Alt Linux
Astra Linux
Debian
Linuxmint
Linux Kernel
Red Hat
Suse
Ubuntu