PT-2025-34361 · Linux+4 · Linux Kernel+4
Published
2024-02-15
·
Updated
2026-01-22
·
CVE-2024-58239
CVSS v3.1
5.5
Medium
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions:
Linux Kernel (affected versions not specified)
Description:
The Linux kernel contains an issue where the
recv() function may continue processing even after process rx list returns a non-DATA record. This can lead to merging of records, potentially causing unexpected behavior. The issue occurs when a non-DATA record is present on the receive list (rx list) and another record of the same type remains in the queue. The process rx list function copies the non-DATA record, and the loop continues processing records of the same type, ultimately breaking out of the loop without processing DATA.Recommendations:
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Infinite Loop
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Astra Linux
Linux Kernel
Red Hat
Red Os
Suse