Description
Linux Kernel contains an improper check for unusual or exceptional conditions vulnerability in the TLS receive path which allows a zero-length record retrieved from the rx_list to bypass the intended recvmsg() record-type handling, potentially causing subsequent TLS records to be processed using incorrect zero-copy and queuing assumptions. The impacted product(s) could be end-of-life (EoL) and/or end-of-service (EoS). Users are advised to discontinue use and/or transition to a supported version.
Full record on cve.org →Affected packages
| Package | Vendor / Product | Version range | Status |
|---|---|---|---|
| Linux | Linux / Linux | >= 0, < 6.0 | unaffected |
| Linux | Linux / Linux | 6.0 | affected |
| Linux | Linux / Linux | >= 6.1.149, <= 6.1.* | unaffected |
| Linux | Linux / Linux | >= 6.12.44, <= 6.12.* | unaffected |
| Linux | Linux / Linux | >= 6.16.4, <= 6.16.* | unaffected |
| Linux | Linux / Linux | >= 6.17, <= * | unaffected |
| Linux | Linux / Linux | >= 6.6.103, <= 6.6.* | unaffected |
| Linux | Linux / Linux | >= 84c61fe1a75b4255df1e1e7c054c9e6d048da417, < 2902c3ebcca52ca845c03182000e8d71d3a5196f | affected |
| Linux | Linux / Linux | >= 84c61fe1a75b4255df1e1e7c054c9e6d048da417, < c09dd3773b5950e9cfb6c9b9a5f6e36d06c62677 | affected |
| Linux | Linux / Linux | >= 84c61fe1a75b4255df1e1e7c054c9e6d048da417, < 3439c15ae91a517cf3c650ea15a8987699416ad9 | affected |
| Linux | Linux / Linux | >= 84c61fe1a75b4255df1e1e7c054c9e6d048da417, < 29c0ce3c8cdb6dc5d61139c937f34cb888a6f42e | affected |
| Linux | Linux / Linux | >= 84c61fe1a75b4255df1e1e7c054c9e6d048da417, < 62708b9452f8eb77513115b17c4f8d1a22ebf843 | affected |
| SIMATIC CN 4100 | Siemens / SIMATIC CN 4100 | >= 0, < V5.0 | affected |