CVE-2024-58240

high

Published 2025-08-28 · Modified 2026-05-12

💬 Discuss on Community ✚ Propose mitigation

CVSS v3

7.8

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CVSS v4 NEW

—

not yet in upstream

VIR risk

7.8

Description

In the Linux kernel, the following vulnerability has been resolved: tls: separate no-async decryption request handling from async If we're not doing async, the handling is much simpler. There's no reference counting, we just need to wait for the completion to wake us up and return its result. We should preferably also use a separate crypto_wait. I'm not seeing a UAF as I did in the past, I think aec7961916f3 ("tls: fix race between async notify and socket close") took care of it. This will make the next fix easier.

Predictions

Exploit likelihood

75%

Patch ETA

—

Heuristic predictions, AS-IS, for prioritization only.

Mitigations

Mitigation details

Source: Debian Security Tracker · View original ↗ · DFSG

CVE-2024-58240 NameCVE-2024-58240 DescriptionIn the Linux kernel, the following vulnerability has been resolved: tls: separate no-async decryption request handling from async If we're not doing async, the handling is much simpler. There's no reference counting, we just need to wait for the completion to wake us up and return its result. We should preferably also use a separate crypto_wait. I'm…

CVE-2024-58240

Name	CVE-2024-58240
Description	In the Linux kernel, the following vulnerability has been resolved: tls: separate no-async decryption request handling from async If we're not doing async, the handling is much simpler. There's no reference counting, we just need to wait for the completion to wake us up and return its result. We should preferably also use a separate crypto_wait. I'm not seeing a UAF as I did in the past, I think aec7961916f3 ("tls: fix race between async notify and socket close") took care of it. This will make the next fix easier.
Source	CVE (at NVD; CERT, ENISA, LWN, oss-sec, fulldisc, Debian ELTS, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub advisories/code/issues, web search, more)
References	DLA-4328-1, DSA-6009-1

Vulnerable and fixed packages

The table below lists information on source packages.

Source Package	Release	Version	Status
linux (PTS)	bullseye	5.10.223-1	vulnerable
	bullseye (security)	5.10.257-1	vulnerable
	bookworm	6.1.170-3	fixed
	bookworm (security)	6.1.174-1	fixed
	trixie	6.12.86-1	fixed
	trixie (security)	6.12.90-2	fixed
	forky	7.0.9-1	fixed
	sid	7.0.10-1	fixed
linux-6.1 (PTS)	bullseye (security)	6.1.174-1~deb11u1	fixed

The information below is based on the following data on fixed versions.

Package	Type	Release	Fixed Version	Origin
linux	source	bookworm	6.1.153-1	DSA-6009-1
linux	source	(unstable)	6.7.9-1
linux-6.1	source	bullseye	6.1.153-1~deb11u1	DLA-4328-1

Notes

https://git.kernel.org/linus/41532b785e9d79636b3815a64ddf6a096647d011 (6.8-rc7)

Home - Debian Security - Source (Git)

Apply commands

text fix

Notes

https://git.kernel.org/linus/41532b785e9d79636b3815a64ddf6a096647d011 (6.8-rc7)

OS impact

Linux kernel Affected 2 releases

Version	Status	Fixed in
6.8	Affected	—
—	Affected	`6.1.149`

SUSE Affected 1 release

Version	Status	Fixed in
—	Affected	—

Debian Mixed 6 releases

Version	Status	Fixed in
trixie	Fixed	`6.7.9-1`
sid	Fixed	`6.7.9-1`
forky	Fixed	`6.7.9-1`
bullseye	Fixed	`6.1.153-1~deb11u1`
bookworm	Fixed	`6.1.153-1`
11.0	Affected	—

References

CWEs

CWE-416

Community-verified mitigations for this CVE will appear above when contributors publish them.

Verify integrity in audit chain (admin only). AS-IS.